UniqAI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2024-11-26 14:02:29 +00:00
Code Issues Actions 13 Packages Projects Releases Wiki Activity

We should verify signatures to make the whole session secret meaningful.

Browse Source
This commit is contained in:
Tim Farrell 2024-02-01 13:46:45 -06:00
parent 03a7e35967
commit 2c1dacb9b6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/utils/utils.py
View File

@ -48,7 +48,7 @@ def create_token(data: dict, expires_delta: Union[timedelta, None] = None) -> st
def decode_token(token: str) -> Optional[dict]: def decode_token(token: str) -> Optional[dict]:
try: try:
decoded = jwt.decode(token, SESSION_SECRET, options={"verify_signature": False}) decoded = jwt.decode(token, SESSION_SECRET)
return decoded return decoded
except Exception as e: except Exception as e:
return None return None