adelorenzo/stable
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

remove default secret_ws_token, set timeout min to 0

Browse Source
This commit is contained in:
Timothy Pogue
2022-09-11 11:42:13 -06:00
parent 818f7bfc40
commit 5483cf21f6
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
freqtrade/rpc/api_server/api_auth.py
View File

@@ -56,7 +56,7 @@ async def validate_ws_token(
ws_token: Union[str, None] = Query(default=None, alias="token"),
api_config: Dict[str, Any] = Depends(get_api_config)
):
secret_ws_token = api_config.get('ws_token', 'secret_ws_t0ken.')
secret_ws_token = api_config.get('ws_token', None)
secret_jwt_key = api_config.get('jwt_secret_key', 'super-secret')
if ws_token and secrets.compare_digest(secret_ws_token, ws_token):