Merge tag '2023.12.1' into merge-upstream

2023-12-28 03:58:07 +09:00 · 2023-12-28 03:58:07 +09:00 · 018ff4cbda
commit 018ff4cbda
parent 90e8b942a3 53898c5006
336 changed files with 1938 additions and 1116 deletions
--- a/packages/backend/src/server/api/StreamingApiServerService.ts
+++ b/packages/backend/src/server/api/StreamingApiServerService.ts
@ -71,6 +71,10 @@ export class StreamingApiServerService {

 			try {
 				[user, app] = await this.authenticateService.authenticate(token);
+
+				if (app !== null && !app.permission.some(p => p === 'read:account')) {
+					throw new AuthenticationError('Your app does not have necessary permissions to use websocket API.');
+				}
 			} catch (e) {
 				if (e instanceof AuthenticationError) {
 					socket.write([