starred/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-11-06 13:10:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix(github): check the private key before generating app tokens

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Andras Bacsai
2026-09-28 11:18:29 +02:00
co-authored by Claude Opus 5.5
parent af19bd0a50
commit eed50d6781
2 changed files with 42 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bootstrap/helpers/github.php
+11 -2
View File
@@ -166,11 +166,20 @@ function assertGithubClockInSync(string $apiUrl): void
}
}
function githubAppPrivateKey(GithubApp $source): ?PrivateKey
{
$privateKey = $source->privateKey;
return $privateKey?->team_id === $source->team_id ? $privateKey : null;
}
function generateGithubToken(GithubApp $source, string $type)
{
$privateKey = githubAppPrivateKey($source) ?? throw new RuntimeException('Private key not found for this GitHub App.');
assertGithubClockInSync($source->api_url);
$signingKey = InMemory::plainText($source->privateKey->private_key);
$signingKey = InMemory::plainText($privateKey->private_key);
$algorithm = new Sha256;
$tokenBuilder = (new Builder(new JoseEncoder, ChainedFormatter::default()));
$now = CarbonImmutable::now()->setTimezone('UTC');
@@ -279,7 +288,7 @@ function syncGithubAppName(GithubApp $source, bool $throw = false): ?string
return null;
}
$privateKey = $source->privateKey ?: PrivateKey::find($source->private_key_id);
$privateKey = githubAppPrivateKey($source);
if (! $privateKey) {
return null;