Set cached token permissions to 600

alan-turing-institute · Jul 10, 2024 · 67ec89c · 67ec89c
1 parent d6a111d
commit 67ec89c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/meet.cabal b/meet.cabal
@@ -42,6 +42,7 @@ library
         tz >= 0.1.3 && < 0.2,
         directory >= 1.3.8 && < 1.4,
         filepath >= 1.4.200 && < 1.5,
+        unix >= 2.8.4 && < 2.9,
 
 executable meet
     main-is:            Main.hs

diff --git a/src/Azure.hs b/src/Azure.hs
@@ -30,6 +30,7 @@ import System.Directory (XdgDirectory (..), createDirectoryIfMissing, doesFileEx
 import System.Exit (ExitCode (..))
 import System.FilePath (takeDirectory)
 import System.Process (readProcessWithExitCode, spawnCommand)
+import System.Posix.Files (setFileMode)
 
 data Token = Token
   { accessToken :: Text,
@@ -56,6 +57,7 @@ serialiseToken token = do
   fp <- getTokenJsonFilePath
   createDirectoryIfMissing True (takeDirectory fp)
   encodeFile fp token
+  setFileMode fp 0o600
 
 deserialiseToken :: IO (Maybe Token)
 deserialiseToken = do