java-topology/defects/veloren-0002/patch/veloren-0002.patch

31 lines
1.5 KiB
Diff

# UNDF: UNDF-2026-000000955
--- a/server/src/login_provider.rs
+++ b/server/src/login_provider.rs
@@ -185,7 +185,7 @@ impl LoginProvider {
srv: Arc<AuthClient>,
username_or_token: &str,
) -> Result<(String, Uuid), RegisterError> {
- info!(?username_or_token, "Validating token");
+ info!(token_len = username_or_token.len(), "Validating token");
// Parse token
let token = AuthToken::from_str(username_or_token)
.map_err(|e| RegisterError::AuthError(e.to_string()))?;
--- a/server/src/sys/msg/register.rs
+++ b/server/src/sys/msg/register.rs
@@ -137,7 +137,7 @@ impl<'a> System<'a> for Sys {
let _ = super::try_recv_all(client, 0, |_, msg: ClientRegister| {
- trace!(?msg.token_or_username, "defer auth lockup");
+ trace!(token_len = msg.token_or_username.len(), "defer auth lockup");
let pending = read_data.login_provider.verify(&msg.token_or_username);
locale = msg.locale;
let _ = pending_logins.insert(entity, pending);
--- a/network/src/scheduler.rs
+++ b/network/src/scheduler.rs
@@ -480,7 +480,6 @@ impl Scheduler {
warn!(
?cid,
?pid,
- ?secret,
"Detected incompatible Secret!, this is probably an attack!"
);