From 8923afedd5aec2bbf1404835913ea4e7ac690e1a Mon Sep 17 00:00:00 2001 From: Silian Zheng <113701655+SilianZ@users.noreply.github.com> Date: Wed, 23 Jul 2025 17:43:59 +0800 Subject: [PATCH] Use time-aware signature validation --- core/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/__init__.py b/core/__init__.py index 8f2ec70..2b860c0 100644 --- a/core/__init__.py +++ b/core/__init__.py @@ -261,7 +261,7 @@ async def access_log_middleware(request: fastapi.Request, call_next): def get_cluster_from_sign(hash: str, s: str, e: str) -> Optional[str]: for cluster in clusters.clusters: - if check_sign_without_time(hash, cluster._token._secret, s, e): + if check_sign(hash, cluster._token._secret, s, e): return cluster.id return None