bugfix: update the RegExp to suit the new GitHub access tokens format. (#85)

pintsized · web-flow · commit 2891c6af9413 · 2021-05-14T23:37:14.000+08:00
See: https://github.blog/changelog/2021-03-04-authentication-token-format-updates/ The new format has a potentially useful prefix, but this should support both old and new tokens.
diff --git a/bin/opm b/bin/opm
@@ -812,7 +812,7 @@ sub do_upload {
         err "$rc_file: no \"github_token\" specified.\n";
     }
 
-    if ($token !~ /^[a-f0-9]{40}$/i) {
+    if ($token !~ /^[a-z0-9_]{40,255}$/i) {
         err "$rc_file: bad \"github_token\" value: $token\n";
     }
 
diff --git a/web/lua/opmserver.lua b/web/lua/opmserver.lua
@@ -129,7 +129,7 @@ function _M.do_upload()
 
     local token = ngx_var.http_x_token
 
-    if not re_find(token, [[^[a-f0-9]{40}$]], "ijo") then
+    if not re_find(token, [[^[a-z0-9_]{40,255}$]], "ijo") then
         return log_and_out_err(ctx, 400, "bad github personal access token.")
     end
 

Original file line number	Diff line number	Diff line change
`@@ -812,7 +812,7 @@ sub do_upload {`
`812`	`812`	`err "$rc_file: no \"github_token\" specified.\n";`
`813`	`813`	`}`
`814`	`814`
`815`		`- if ($token !~ /^[a-f0-9]{40}$/i) {`
	`815`	`+ if ($token !~ /^[a-z0-9_]{40,255}$/i) {`
`816`	`816`	`err "$rc_file: bad \"github_token\" value: $token\n";`
`817`	`817`	`}`
`818`	`818`