Skip to content

Commit db6d4f6

Browse files
committed
fix: add missing uuid validations
1 parent 4b66979 commit db6d4f6

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

src/auth/src/supabase_auth/_async/gotrue_admin_api.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -314,6 +314,7 @@ async def _delete_oauth_client(
314314
This function should only be called on a server.
315315
Never expose your `service_role` key in the browser.
316316
"""
317+
validate_uuid(client_id)
317318
return await self._request(
318319
"DELETE",
319320
f"admin/oauth/clients/{client_id}",
@@ -333,6 +334,7 @@ async def _regenerate_oauth_client_secret(
333334
This function should only be called on a server.
334335
Never expose your `service_role` key in the browser.
335336
"""
337+
validate_uuid(client_id)
336338
return await self._request(
337339
"POST",
338340
f"admin/oauth/clients/{client_id}/regenerate_secret",

src/auth/src/supabase_auth/_sync/gotrue_admin_api.py

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
model_validate,
99
parse_link_response,
1010
parse_user_response,
11+
validate_uuid,
1112
)
1213
from ..http_clients import SyncClient
1314
from ..types import (
@@ -298,6 +299,7 @@ def _get_oauth_client(
298299
This function should only be called on a server.
299300
Never expose your `service_role` key in the browser.
300301
"""
302+
validate_uuid(client_id)
301303
return self._request(
302304
"GET",
303305
f"admin/oauth/clients/{client_id}",
@@ -317,6 +319,7 @@ def _delete_oauth_client(
317319
This function should only be called on a server.
318320
Never expose your `service_role` key in the browser.
319321
"""
322+
validate_uuid(client_id)
320323
return self._request(
321324
"DELETE",
322325
f"admin/oauth/clients/{client_id}",
@@ -336,6 +339,7 @@ def _regenerate_oauth_client_secret(
336339
This function should only be called on a server.
337340
Never expose your `service_role` key in the browser.
338341
"""
342+
validate_uuid(client_id)
339343
return self._request(
340344
"POST",
341345
f"admin/oauth/clients/{client_id}/regenerate_secret",

0 commit comments

Comments
 (0)