This commit is contained in:
2026-05-30 02:24:55 +02:00
parent 20c0c33cde
commit 1b68ea7231
3 changed files with 34 additions and 22 deletions
@@ -23,15 +23,17 @@ public sealed class TicketValidationMiddleware(
}
var token = context.Request.Query[options.QueryParameterName].ToString();
var prefix = await ticketValidator.TryGetPrefixAsync(token);
var validation = await ticketValidator.ValidateTicketAsync(token);
if (prefix is null)
if (!validation.IsSuccess)
{
logger.LogWarning("Rejected media request {Path}: missing or invalid ticket", path);
context.Response.StatusCode = StatusCodes.Status401Unauthorized;
return;
}
var prefix = validation.Value;
var objectKey = remaining.Value?.TrimStart('/') ?? string.Empty;
if (!objectKey.StartsWith(prefix, StringComparison.Ordinal))
{