Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only generate consoleApiKey for same-instance migrations

Browse Source
This commit is contained in:
Prem Palanisamy
2026-02-12 16:40:20 +00:00
parent 86ea75026f
commit d1170836b8
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Appwrite/Platform/Workers/Migrations.php
+4 -5
View File
@@ -367,7 +367,6 @@ class Migrations extends Action
$project = $this->project;
$tempAPIKey = $this->generateAPIKey($project);
$tempConsoleAPIKey = $this->generateConsoleAPIKey();
$transfer = $source = $destination = null;
@@ -386,10 +385,10 @@ class Migrations extends Action
$credentials['apiKey'] = $credentials['apiKey'] ?? $tempAPIKey;
$credentials['endpoint'] = $credentials['endpoint'] ?? $endpoint;
// Only set consoleApiKey for same-instance migrations to avoid
// leaking a locally-signed JWT to untrusted remote servers
if (($credentials['endpoint'] ?? '') === $endpoint) {
$credentials['consoleApiKey'] = $tempConsoleAPIKey;
// Only generate and set consoleApiKey for same-instance migrations
// to avoid leaking a locally-signed JWT to untrusted remote servers
if ($credentials['endpoint'] === $endpoint) {
$credentials['consoleApiKey'] = $this->generateConsoleAPIKey();
$credentials['sourceProjectId'] = $credentials['projectId'];
}
}