mab122
/
radicle-heartwood-lfs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

httpd: Filter-out private-but-pinned repos 

They should only be visible to localhost.
This commit is contained in:
Michael Raitza 2024-02-16 15:27:08 +01:00
parent 9767b485c2
commit 0908c65f50
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
radicle-httpd/src/api/v1/projects.rs
View File

@ -100,7 +100,14 @@ async fn project_root_handler(
Visibility::Public => true, Visibility::Public => true,
}) })
.collect::<Vec<_>>(), .collect::<Vec<_>>(),
ProjectQuery::Pinned => storage.repositories_by_id(pinned.repositories.iter())?, ProjectQuery::Pinned => storage
.repositories_by_id(pinned.repositories.iter())?
.into_iter()
.filter(|repo| match &repo.doc.visibility {
Visibility::Private { .. } => addr.ip().is_loopback(),
Visibility::Public => true,
})
.collect::<Vec<_>>(),
}; };
projects.sort_by_key(|p| p.rid); projects.sort_by_key(|p| p.rid);