snowykami/meilisearch
1
0
Fork 0
mirror of https://github.com/meilisearch/meilisearch.git synced 2025-09-06 12:46:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Make the uuids random again to prevent abuse using rainbow tables

Browse Source
This commit is contained in:
Mubelotix
2025-06-19 15:45:09 +02:00
parent 67f2a30d7c
commit 705e9a9e5e
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
crates/meilisearch/tests/auth/api_keys.rs
View File

@ -790,7 +790,7 @@ async fn list_api_keys() {
meili_snap::snapshot!(code, @"201 Created");
let (response, code) = server.list_api_keys("").await;
meili_snap::snapshot!(meili_snap::json_string!(response, { ".results[].createdAt" => "[ignored]", ".results[].updatedAt" => "[ignored]", ".results[0].uid" => "[ignored]", ".results[].key" => "[ignored]" }), @r#"
meili_snap::snapshot!(meili_snap::json_string!(response, { ".results[].createdAt" => "[ignored]", ".results[].updatedAt" => "[ignored]", ".results[].uid" => "[ignored]", ".results[].key" => "[ignored]" }), @r#"
{
"results": [
{
@ -824,7 +824,7 @@ async fn list_api_keys() {
"name": "Default Search API Key",
"description": "Use it to search from the frontend",
"key": "[ignored]",
"uid": "00000000-0000-0000-0000-000000000002",
"uid": "[ignored]",
"actions": [
"search"
],
@ -839,7 +839,7 @@ async fn list_api_keys() {
"name": "Default Admin API Key",
"description": "Use it for anything that is not a search operation. Caution! Do not expose it on a public frontend",
"key": "[ignored]",
"uid": "00000000-0000-0000-0000-000000000000",
"uid": "[ignored]",
"actions": [
"*"
],
@ -854,7 +854,7 @@ async fn list_api_keys() {
"name": "Default Read-Only Admin API Key",
"description": "Use it to peek into the instance in a read-only mode. Caution! Do not expose it on a public frontend. It would give access to all other keys",
"key": "[ignored]",
"uid": "00000000-0000-0000-0000-000000000001",
"uid": "[ignored]",
"actions": [
"*.get"
],
@ -869,7 +869,7 @@ async fn list_api_keys() {
"name": "Default Chat API Key",
"description": "Use it to chat and search from the frontend",
"key": "[ignored]",
"uid": "00000000-0000-0000-0000-000000000003",
"uid": "[ignored]",
"actions": [
"chatCompletions",
"search"