only check path

Hitenjain14 · Hitenjain14 · commit f3d6beb0e03d · 2024-11-04T00:14:24.000+05:30
diff --git a/code/go/0chain.net/blobbercore/handler/authticket.go b/code/go/0chain.net/blobbercore/handler/authticket.go
@@ -27,13 +27,10 @@ func verifyAuthTicket(ctx context.Context, authTokenString string, allocationObj
 	}
 
 	if refRequested.LookupHash != authToken.FilePathHash {
-		authTokenRef, err := reference.GetLimitedRefFieldsByLookupHashWith(ctx, authToken.AllocationID, authToken.FilePathHash, []string{"id", "path", "type"})
+		authTokenRef, err := reference.GetLimitedRefFieldsByLookupHashWith(ctx, authToken.AllocationID, authToken.FilePathHash, []string{"id", "path"})
 		if err != nil {
 			return nil, err
 		}
-		if authTokenRef.Type == reference.FILE {
-			return nil, common.NewError("invalid_parameters", "Auth ticket is not valid for the resource being requested")
-		}
 		prefixPath := authTokenRef.Path + "/"
 		if !strings.HasPrefix(refRequested.Path, prefixPath) {
 			return nil, common.NewError("invalid_parameters", "Auth ticket is not valid for the resource being requested")

Original file line number	Diff line number	Diff line change
`@@ -27,13 +27,10 @@ func verifyAuthTicket(ctx context.Context, authTokenString string, allocationObj`
`27`	`27`	`}`
`28`	`28`
`29`	`29`	`if refRequested.LookupHash != authToken.FilePathHash {`
`30`		`- authTokenRef, err := reference.GetLimitedRefFieldsByLookupHashWith(ctx, authToken.AllocationID, authToken.FilePathHash, []string{"id", "path", "type"})`
	`30`	`+ authTokenRef, err := reference.GetLimitedRefFieldsByLookupHashWith(ctx, authToken.AllocationID, authToken.FilePathHash, []string{"id", "path"})`
`31`	`31`	`if err != nil {`
`32`	`32`	`return nil, err`
`33`	`33`	`}`
`34`		`- if authTokenRef.Type == reference.FILE {`
`35`		`- return nil, common.NewError("invalid_parameters", "Auth ticket is not valid for the resource being requested")`
`36`		`- }`
`37`	`34`	`prefixPath := authTokenRef.Path + "/"`
`38`	`35`	`if !strings.HasPrefix(refRequested.Path, prefixPath) {`
`39`	`36`	`return nil, common.NewError("invalid_parameters", "Auth ticket is not valid for the resource being requested")`