Skip to content

fix: require auth for webconsole profile endpoints#209

Open
Zach1113 wants to merge 1 commit into
free5gc:mainfrom
Zach1113:fix/webconsole-profile-auth
Open

fix: require auth for webconsole profile endpoints#209
Zach1113 wants to merge 1 commit into
free5gc:mainfrom
Zach1113:fix/webconsole-profile-auth

Conversation

@Zach1113

@Zach1113 Zach1113 commented Jun 24, 2026

Copy link
Copy Markdown

Fix WebConsole profile endpoint authentication free5gc/free5gc#1072

Problem:

  • Several WebConsole profile endpoints allowed unauthenticated read, update, and delete operations on provisioning profiles.
  • GetProfile, PutProfile, DeleteProfile, and DeleteMultipleProfiles did not validate the Token header, while related profile endpoints already did.

Fix:

  • Added a shared profile auth helper using the existing JWT parsing behavior.
  • Applied the helper to profile get, create, update, and delete handlers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant