TildeClub/ttrv
1
0
Fork 0
mirror of https://github.com/tildeclub/ttrv.git synced 2026-06-27 22:19:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Harden OAuth refresh token file permissions

Browse Source
This commit is contained in:
deepend-tildeclub
2026-06-18 11:20:45 -06:00
parent d1d1fc89cf
commit 3a99a87755
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ttrv/__version__.py
View File

@@ -1,4 +1,4 @@
# -*- coding: utf-8 -*- # -*- coding: utf-8 -*-
from __future__ import unicode_literals from __future__ import unicode_literals
__version__ = '1.27.4' __version__ = '1.27.5'

5
ttrv/config.py
View File

@@ -196,8 +196,11 @@ class Config(object):
def save_refresh_token(self): def save_refresh_token(self):
self._ensure_filepath(self.token_file) self._ensure_filepath(self.token_file)
with open(self.token_file, 'w+') as fp: flags = os.O_WRONLY | os.O_CREAT | os.O_TRUNC
fd = os.open(self.token_file, flags, 0o600)
with os.fdopen(fd, 'w') as fp:
fp.write(self.refresh_token) fp.write(self.refresh_token)
os.chmod(self.token_file, 0o600)
def delete_refresh_token(self): def delete_refresh_token(self):
if os.path.exists(self.token_file): if os.path.exists(self.token_file):