Fail if auth key is read without prior authorization

pull/17/merge
Richard Körber 2015-12-12 20:18:32 +01:00
parent 2d5261f592
commit 26b86b8f72
2 changed files with 8 additions and 2 deletions

View File

@ -29,7 +29,7 @@ public class DnsChallenge extends GenericChallenge {
*/ */
public static final String TYPE = "dns-01"; public static final String TYPE = "dns-01";
private String authorization; private String authorization = null;
/** /**
* Returns the token to be used for this challenge. * Returns the token to be used for this challenge.
@ -49,6 +49,9 @@ public class DnsChallenge extends GenericChallenge {
* Returns the authorization string to be used for the response. * Returns the authorization string to be used for the response.
*/ */
public String getAuthorization() { public String getAuthorization() {
if (authorization == null) {
throw new IllegalStateException("not yet authorized");
}
return authorization; return authorization;
} }

View File

@ -29,7 +29,7 @@ public class HttpChallenge extends GenericChallenge {
*/ */
public static final String TYPE = "http-01"; public static final String TYPE = "http-01";
private String authorization; private String authorization = null;
/** /**
* Returns the token to be used for this challenge. * Returns the token to be used for this challenge.
@ -53,6 +53,9 @@ public class HttpChallenge extends GenericChallenge {
* (like white-spaces or line breaks). Otherwise the challenge will fail. * (like white-spaces or line breaks). Otherwise the challenge will fail.
*/ */
public String getAuthorization() { public String getAuthorization() {
if (authorization == null) {
throw new IllegalStateException("not yet authorized");
}
return authorization; return authorization;
} }