TyleoDvDelaware3217/Kuma
1
0
Fork 0
mirror of https://github.com/louislam/uptime-kuma.git synced 2025-06-14 00:22:34 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

increased pushToken security

Browse source
This commit is contained in:
Andreas Brett 2021-11-11 19:46:07 +01:00
parent 5df34cd137
commit d62561c3be
4 changed files with 15 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
db/patch-monitor-push_token.sql
View file

@ -2,6 +2,6 @@
BEGIN TRANSACTION; BEGIN TRANSACTION;
ALTER TABLE monitor ALTER TABLE monitor
ADD push_token VARCHAR(20) DEFAULT NULL; ADD push_token VARCHAR(32) DEFAULT NULL;
COMMIT; COMMIT;

1
src/languages/de-DE.js
View file

@ -304,4 +304,5 @@ export default {
"One record": "Ein Eintrag", "One record": "Ein Eintrag",
steamApiKeyDescription: "Um einen Steam Game Server zu überwachen, wird ein Steam Web-API-Schlüssel benötigt. Dieser kann hier registriert werden: ", steamApiKeyDescription: "Um einen Steam Game Server zu überwachen, wird ein Steam Web-API-Schlüssel benötigt. Dieser kann hier registriert werden: ",
"Current User": "Aktueller Benutzer", "Current User": "Aktueller Benutzer",
"Reset Token": "Token zurücksetzen",
}; };

1
src/languages/en.js
View file

@ -307,4 +307,5 @@ export default {
steamApiKeyDescription: "For monitoring a Steam Game Server you need a Steam Web-API key. You can register your API key here: ", steamApiKeyDescription: "For monitoring a Steam Game Server you need a Steam Web-API key. You can register your API key here: ",
"Current User": "Current User", "Current User": "Current User",
recent: "Recent", recent: "Recent",
"Reset Token": "Reset Token",
}; };

13
src/pages/EditMonitor.vue
View file

@ -55,6 +55,9 @@
{{ $t("needPushEvery", [monitor.interval]) }}<br /> {{ $t("needPushEvery", [monitor.interval]) }}<br />
{{ $t("pushOptionalParams", ["msg, ping"]) }} {{ $t("pushOptionalParams", ["msg, ping"]) }}
</div> </div>
<button class="btn btn-primary" type="button" @click="resetToken">
{{ $t("Reset Token") }}
</button>
</div> </div>
<!-- Keyword --> <!-- Keyword -->
@ -287,6 +290,8 @@ import { genSecret, isDev } from "../util.ts";
const toast = useToast(); const toast = useToast();
const pushTokenLength = 32;
export default { export default {
components: { components: {
CopyableInput, CopyableInput,
@ -370,7 +375,9 @@ export default {
"monitor.type"() { "monitor.type"() {
if (this.monitor.type === "push") { if (this.monitor.type === "push") {
if (! this.monitor.pushToken) { if (! this.monitor.pushToken) {
this.monitor.pushToken = genSecret(10); // ideally this would require checking if the generated token is already used
// it's very unlikely to get a collision though (62^32 ~ 2.27265788 * 10^57 unique tokens)
this.monitor.pushToken = genSecret(pushTokenLength);
} }
} }
} }
@ -470,6 +477,10 @@ export default {
return true; return true;
}, },
resetToken() {
this.monitor.pushToken = genSecret(pushTokenLength);
},
async submit() { async submit() {
this.processing = true; this.processing = true;