[libeufin] branch master updated: sandbox: fix bogus auth check

[gnunet]

This is an automated email from the git hooks/post-receive script.

dold pushed a commit to branch master
in repository libeufin.

The following commit(s) were added to refs/heads/master by this push:
     new ef1c1f82 sandbox: fix bogus auth check
ef1c1f82 is described below

commit ef1c1f82d3a0f57af680c29279f77c1de683ef55
Author: Florian Dold <florian@dold.me>
AuthorDate: Mon Oct 17 00:54:01 2022 +0200

    sandbox: fix bogus auth check
---
 sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt 
b/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
index b4955783..cb0dcd38 100644
--- a/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
+++ b/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
@@ -1259,7 +1259,7 @@ val sandboxApp: Application.() -> Unit = {
                         call.getUriComponent("account_name"),
                         demobank
                     )
-                    if (maybeOwnedAccount.owner != username) throw 
unauthorized(
+                    if (maybeOwnedAccount.owner != username && WITH_AUTH) 
throw unauthorized(
                         "Customer '$username' has no rights over bank account 
'${maybeOwnedAccount.label}'"
                     )
                     val req = call.receiveJson<WithdrawalRequest>()

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.