Skip to content

Commit dbd801d

Browse files
committed
fix: add missing uuid validations
1 parent b9f5562 commit dbd801d

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

src/auth/src/supabase_auth/_async/gotrue_admin_api.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -314,6 +314,7 @@ async def _delete_oauth_client(
314314
This function should only be called on a server.
315315
Never expose your `service_role` key in the browser.
316316
"""
317+
validate_uuid(client_id)
317318
return await self._request(
318319
"DELETE",
319320
f"admin/oauth/clients/{client_id}",
@@ -333,6 +334,7 @@ async def _regenerate_oauth_client_secret(
333334
This function should only be called on a server.
334335
Never expose your `service_role` key in the browser.
335336
"""
337+
validate_uuid(client_id)
336338
return await self._request(
337339
"POST",
338340
f"admin/oauth/clients/{client_id}/regenerate_secret",

src/auth/src/supabase_auth/_sync/gotrue_admin_api.py

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@
1010
model_validate,
1111
parse_link_response,
1212
parse_user_response,
13+
validate_uuid,
1314
)
1415
from ..http_clients import SyncClient
1516
from ..types import (
@@ -303,6 +304,7 @@ def _get_oauth_client(
303304
This function should only be called on a server.
304305
Never expose your `service_role` key in the browser.
305306
"""
307+
validate_uuid(client_id)
306308
return self._request(
307309
"GET",
308310
f"admin/oauth/clients/{client_id}",
@@ -322,6 +324,7 @@ def _delete_oauth_client(
322324
This function should only be called on a server.
323325
Never expose your `service_role` key in the browser.
324326
"""
327+
validate_uuid(client_id)
325328
return self._request(
326329
"DELETE",
327330
f"admin/oauth/clients/{client_id}",
@@ -341,6 +344,7 @@ def _regenerate_oauth_client_secret(
341344
This function should only be called on a server.
342345
Never expose your `service_role` key in the browser.
343346
"""
347+
validate_uuid(client_id)
344348
return self._request(
345349
"POST",
346350
f"admin/oauth/clients/{client_id}/regenerate_secret",

0 commit comments

Comments
 (0)