Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update some authentication related checks #111

Open
wants to merge 3 commits into
base: dev
Choose a base branch
from
Open

Conversation

jonbarrow
Copy link
Member

Resolves #XXX

Changes:

These changes have been hot-patched in the prod servers for a long time now. This PR simply brings them upstream. Changes include:

  • Only allowing Basic auth in some endpoints
  • Validating that an access token came from a console by checking it's system type
  • Validating the device certificate padding section

Marking as draft for now since I hate the way the "check the system type" feature was implemented. It's a hack, and I want to change it. There's also a couple open issues now directly relating to tokens which we may want to implement here first before merging? Unsure, would like some opinions.

@jonbarrow jonbarrow marked this pull request as ready for review October 19, 2024 14:00
@@ -137,7 +146,7 @@ class NintendoCertificate {
this.consoleType = '3ds';
}

this._verifySignature();
this._verifySignatureECDSA(); // * Force it to use the expected certificate type
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why was this changed?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants