mirror of
https://github.com/fromchat-messenger/web.git
synced 2026-09-22 19:15:08 +03:00
Remove user agent checks
This commit is contained in:
@@ -17,7 +17,6 @@ import os
|
||||
|
||||
from security.audit import log_security
|
||||
from security.profanity import contains_profanity
|
||||
from security.user_agent_blocklist import is_user_agent_blocked
|
||||
from security.rate_limit import rate_limit_per_ip
|
||||
router = APIRouter()
|
||||
|
||||
@@ -73,20 +72,6 @@ def login(request: Request, login_request: LoginRequest, db: Session = Depends(g
|
||||
client_ip = get_client_ip(request)
|
||||
raw_ua = request.headers.get("user-agent")
|
||||
|
||||
if is_user_agent_blocked(raw_ua):
|
||||
log_security(
|
||||
"blocked_user_agent",
|
||||
severity="warning",
|
||||
username=username,
|
||||
ip=client_ip,
|
||||
user_agent=raw_ua or "Unknown",
|
||||
action_type="login",
|
||||
)
|
||||
raise HTTPException(
|
||||
status_code=403,
|
||||
detail="Доступ запрещён"
|
||||
)
|
||||
|
||||
user = db.query(User).filter(User.username == username).first()
|
||||
|
||||
if not user or not verify_password(login_request.password.strip(), user.password_hash):
|
||||
@@ -189,20 +174,6 @@ def register(request: Request, register_request: RegisterRequest, db: Session =
|
||||
client_ip = get_client_ip(request)
|
||||
raw_ua = request.headers.get("user-agent")
|
||||
|
||||
if is_user_agent_blocked(raw_ua):
|
||||
log_security(
|
||||
"blocked_user_agent",
|
||||
severity="warning",
|
||||
username=username,
|
||||
ip=client_ip,
|
||||
user_agent=raw_ua or "Unknown",
|
||||
action_type="registration",
|
||||
)
|
||||
raise HTTPException(
|
||||
status_code=403,
|
||||
detail="Доступ запрещён"
|
||||
)
|
||||
|
||||
# Determine if owner already exists
|
||||
owner_exists = db.query(User).filter(User.username == OWNER_USERNAME).first() is not None
|
||||
|
||||
|
||||
Reference in New Issue
Block a user