INNER CODE UNIT · Python

api_user_profile

The-Art-of-Hacking/websploit · additional-labs/token-tower/app.py:862

def api_user_profile():
    """Get user profile - requires authentication"""
    token = get_token_from_request()
    
    if not token:
        return jsonify({"error": "No authorization token provided"}), 401
    
    try:
        payload = verify_token_vulnerable(token)
        if payload:
            return jsonify({
                "user": payload.get('user'),
                "role": payload.get('role'),
                "user_id": payload.get('user_id')
            })
        return jsonify({"error": "Invalid token"}), 401
    except Exception as e:
        return jsonify({"error": str(e)}), 401

View source record →