github/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2026-07-05 05:45:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

🐛 Make nitrate calls skip ssrf-check

Browse Source
This commit is contained in:
Pablo Alba 2026-05-18 12:34:23 +02:00 committed by Pablo Alba
parent 14b53ecfec
commit ead9bd9ccc
1 changed files with 16 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
backend/src/app/nitrate.clj
View File

@ -29,14 +29,16 @@
(defn- request-builder
[cfg method uri shared-key profile-id request-params]
(fn []
(http/req cfg (cond-> {:method method
:headers {"content-type" "application/json"
"accept" "application/json"
"x-shared-key" shared-key
"x-profile-id" (str profile-id)}
:uri uri
:version :http1.1}
(= method :post) (assoc :body (json/encode request-params :key-fn json/write-camel-key))))))
(http/req cfg
(cond-> {:method method
:headers {"content-type" "application/json"
"accept" "application/json"
"x-shared-key" shared-key
"x-profile-id" (str profile-id)}
:uri uri
:version :http1.1}
(= method :post) (assoc :body (json/encode request-params :key-fn json/write-camel-key)))
{:skip-ssrf-check? true})))
(defn- with-retries
[handler max-retries]
@ -60,12 +62,13 @@
(fn []
(let [response (handler)
status (:status response)]
(when-not status
(l/error :hint "could't do the nitrate request, it is probably down"
:uri uri)
;; TODO decide what to do when Nitrate is inaccesible
nil)
(cond
(nil? status)
(do
(l/error :hint "could't do the nitrate request, it is probably down"
:uri uri)
;; TODO decide what to do when Nitrate is inaccesible
nil)
(>= status 400)
;; For error status codes (4xx, 5xx), fail immediately without validation
(do