zydronium/google-nomulus
1
0
Fork 0
mirror of https://github.com/google/nomulus.git synced 2025-05-13 16:07:15 +02:00
Code Issues Projects Releases Packages Wiki Activity

Make DownloadServiceAccountCredentialAction only accept internal auth

Browse source 
This temporarily disables the ability to download service account credentials. We'd like this to go in to next week's release so that we do not expose this functionality to users who otherwise do not have the ability to download the service account credential, while we research on a more secure solution.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=223397754
This commit is contained in:
jianglai 2018-11-29 13:09:50 -08:00
parent ec11eae699
commit 54b6770ade
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
java/google/registry/tools/server/DownloadServiceAccountCredentialAction.java
View file

@ -38,7 +38,7 @@ import javax.inject.Named;
@Action(
path = DownloadServiceAccountCredentialAction.PATH,
method = {GET},
auth = Auth.AUTH_INTERNAL_OR_ADMIN)
auth = Auth.AUTH_INTERNAL_ONLY)
public class DownloadServiceAccountCredentialAction implements Runnable {
private static final FluentLogger logger = FluentLogger.forEnclosingClass();