mirrors/nomulus
1
0
Fork 0
mirror of https://github.com/google/nomulus synced 2026-07-26 01:53:16 +00:00
Code Issues Releases Wiki Activity

Update security checks around registry lock verification (#3137)

Browse Source 
1. make it a POST instead of a GET
2. pass the user into DomainLockUtils so we can check permissions to
   make sure they have permissions on the registrar
3. update all the tests
This commit is contained in:
gbrodman
2026-07-16 17:12:34 +00:00
committed by GitHub
parent 192a7e6c4e
commit 21421726e0
7 changed files with 159 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files
console-webapp/src/app/shared/services/backend.service.ts
+3 -2
View File
@@ -288,8 +288,9 @@ export class BackendService {
verifyRegistryLockRequest(
lockVerificationCode: string
): Observable<RegistryLockVerificationResponse> {
return this.http.get<RegistryLockVerificationResponse>(
`/console-api/registry-lock-verify?lockVerificationCode=${lockVerificationCode}`
return this.http.post<RegistryLockVerificationResponse>(
`/console-api/registry-lock-verify?lockVerificationCode=${lockVerificationCode}`,
{}
);
}