Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Authorize function execution with user JWT header

Browse Source
This commit is contained in:
Hemachandar
2026-02-25 13:51:01 +05:30
parent b3f7256156
commit e0d1c0a95d
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/general.php
+15 -1
View File
@@ -364,8 +364,22 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
}
if ($type === 'function') {
$userJwt = $request->getHeader('x-appwrite-user-jwt', '');
$permissions = $resource->getAttribute('execute');
if (!(\in_array('any', $permissions)) && !(\in_array('guests', $permissions))) {
$isExecutionAllowed = (\in_array('any', $permissions)) || (\in_array('guests', $permissions));
if (!$isExecutionAllowed && !empty($userJwt)) {
$jwt = new JWT(System::getEnv('_APP_OPENSSL_KEY_V1'), 'HS256', 3600, 0);
$payload = [];
try {
$payload = $jwt->decode($userJwt);
} catch (JWTException $error) {}
$userId = $payload['userId'] ?? '';
$isExecutionAllowed = \in_array("user:{$userId}", $permissions);
}
if (!$isExecutionAllowed) {
$exception = new AppwriteException(AppwriteException::FUNCTION_EXECUTE_PERMISSION_MISSING, view: $errorView);
$exception->addCTA('View settings', $url . '/console/project-' . $project->getAttribute('region', 'default') . '-' . $project->getId() . '/functions/function-' . $resource->getId() . '/settings');
throw $exception;