openclaw/CHFS-NG
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: align session expiry and WebDAV move permissions

Browse Source
This commit is contained in:
OpenClaw Agent
2026-09-21 22:57:06 +08:00
parent 3c7bbab31c
commit e6e3dfb54c
2 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
chfs-ng/internal/api/server.go
+4 -2
View File
@@ -425,7 +425,7 @@ func (s *Server) session(w http.ResponseWriter, r *http.Request) {
writeJSONError(w, http.StatusNotFound, "user or password is wrong")
return
}
token, err := auth.NewToken(a.Username)
token, err := auth.NewToken(a.Username, s.SessionTimeout)
if err != nil {
writeJSONError(w, http.StatusInternalServerError, "failed to create token")
return
@@ -1447,7 +1447,9 @@ func (f *webdavAuthFS) Copy(ctx context.Context, name, dest string, opts *webdav
return f.inner.Copy(ctx, name, dest, opts)
}
func (f *webdavAuthFS) Move(ctx context.Context, name, dest string, opts *webdav.MoveOptions) (bool, error) {
if err := f.allow(name, auth.Delete); err != nil {
// CHFS treats MOVE as a write operation on the source; W already
// includes read permission and does not require explicit delete permission.
if err := f.allow(name, auth.Write); err != nil {
return false, err
}
parent := path.Dir(webdavAuthPath(dest))