summaryrefslogtreecommitdiffstats
path: root/custodia/http/server.py
diff options
context:
space:
mode:
Diffstat (limited to 'custodia/http/server.py')
-rw-r--r--custodia/http/server.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/custodia/http/server.py b/custodia/http/server.py
index 5b3ec30..423af9c 100644
--- a/custodia/http/server.py
+++ b/custodia/http/server.py
@@ -61,6 +61,8 @@ class ForkingLocalHTTPServer(ForkingMixIn, UnixStreamServer):
raise HTTPError(403)
for auth in authers:
authers[auth].handle(request)
+ if 'valid_auth' not in request or request['valid_auth'] is not True:
+ raise HTTPError(403)
# Select consumer
path = request.get('path', '')