Add limit to service tokens (#2512)

limit service auth to use non-app-pass tokens.
bluesky-social · May 23, 2024 · af8271b · af8271b
1 parent 9974e9a
commit af8271b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/pds/src/api/com/atproto/server/getServiceAuth.ts b/packages/pds/src/api/com/atproto/server/getServiceAuth.ts
@@ -4,7 +4,7 @@ import { Server } from '../../../../lexicon'
 
 export default function (server: Server, ctx: AppContext) {
   server.com.atproto.server.getServiceAuth({
-    auth: ctx.authVerifier.access,
+    auth: ctx.authVerifier.accessNotAppPassword,
     handler: async ({ params, auth }) => {
       const did = auth.credentials.did
       const keypair = await ctx.actorStore.keypair(did)