From bb7fc001cd1bf53f9fa898d18f213f02bc9b2f9a Mon Sep 17 00:00:00 2001 From: Zed <124834187+zZedix@users.noreply.github.com> Date: Sun, 5 Oct 2025 13:22:40 +0330 Subject: [PATCH 1/3] Improve local IP detection and ensure socket cleanup --- app/utils/system.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app/utils/system.py b/app/utils/system.py index 5fbc20717..68b0be637 100644 --- a/app/utils/system.py +++ b/app/utils/system.py @@ -70,6 +70,7 @@ def get_public_ip(): except httpx.RequestError: pass + sock = None try: sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.connect(("8.8.8.8", 80)) @@ -79,7 +80,8 @@ def get_public_ip(): except (socket.error, IndexError): pass finally: - sock.close() + if sock: + sock.close() return "127.0.0.1" From f602c52a5ff81f89a38df1e06dd3627ad072bf5f Mon Sep 17 00:00:00 2001 From: Zed <124834187+zZedix@users.noreply.github.com> Date: Sun, 5 Oct 2025 13:31:29 +0330 Subject: [PATCH 2/3] Harden get_subscription_payload against malformed tokens --- app/utils/jwt.py | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/app/utils/jwt.py b/app/utils/jwt.py index 54adf2c99..29250b0f6 100644 --- a/app/utils/jwt.py +++ b/app/utils/jwt.py @@ -84,9 +84,18 @@ async def get_subscription_payload(token: str) -> dict | None: sha256((u_token + await get_secret_key()).encode("utf-8")).digest(), altchars=b"-_" ).decode("utf-8")[:10] if u_signature == u_token_resign: - u_username = u_token_dec_str.split(",")[0] - u_created_at = int(u_token_dec_str.split(",")[1]) - return {"username": u_username, "created_at": datetime.fromtimestamp(u_created_at, tz=timezone.utc)} + parts = u_token_dec_str.split(",") + if len(parts) != 2: + return + u_username, u_created_at_str = parts + try: + u_created_at = int(u_created_at_str) + except ValueError: + return + return { + "username": u_username, + "created_at": datetime.fromtimestamp(u_created_at, tz=timezone.utc), + } else: return except jwt.exceptions.PyJWTError: From 5f002f031344d931562c193fd5b070683eda4c8b Mon Sep 17 00:00:00 2001 From: Zed <124834187+zZedix@users.noreply.github.com> Date: Sun, 5 Oct 2025 15:15:10 +0330 Subject: [PATCH 3/3] Fix or update node_checker.py --- app/jobs/node_checker.py | 1 + 1 file changed, 1 insertion(+) diff --git a/app/jobs/node_checker.py b/app/jobs/node_checker.py index 9b4ececb5..8ccae98b6 100644 --- a/app/jobs/node_checker.py +++ b/app/jobs/node_checker.py @@ -39,6 +39,7 @@ async def check_health(db_node: Node, node: PasarGuardNode): health = await asyncio.wait_for(node.get_health(), timeout=10) except (asyncio.TimeoutError, NodeAPIError): await node_operator.update_node_status(db_node.id, NodeStatus.error, err="Get health timeout") + return if db_node.status in (NodeStatus.connecting, NodeStatus.error) and health is Health.HEALTHY: await node_operator.update_node_status(db_node.id, NodeStatus.connected)