From 1f4de2ec1591e135732047d658732bf05713260f Mon Sep 17 00:00:00 2001
From: Naeel <naeel@nubes.ru>
Date: Sat, 25 Apr 2026 17:05:02 +0300
Subject: [PATCH] =?UTF-8?q?fix:=20v0.8.15=20=E2=80=94=20auth=20testMode=20?=
 =?UTF-8?q?validates=20@=20in=20token=20(block=20P=20fix)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 console/deploy/console.yaml | 2 +-
 console/main.go             | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/console/deploy/console.yaml b/console/deploy/console.yaml
index 004d761..19c7872 100644
--- a/console/deploy/console.yaml
+++ b/console/deploy/console.yaml
@@ -46,7 +46,7 @@ spec:
       serviceAccountName: fission-console
       containers:
         - name: console
-          image: naeel/fission-console:v0.8.14
+          image: naeel/fission-console:v0.8.15
           ports:
             - containerPort: 8090
           env:
diff --git a/console/main.go b/console/main.go
index 9752723..4c85be1 100644
--- a/console/main.go
+++ b/console/main.go
@@ -1867,6 +1867,10 @@ func (s *server) handleAuth(w http.ResponseWriter, r *http.Request) {
 	var ns string
 	if s.testMode {
 		// testMode: токен — это sub (email), Deck не вызывается
+		if !strings.Contains(body.Token, "@") {
+			writeJSONError(w, http.StatusUnauthorized, "invalid token")
+			return
+		}
 		ns = func() string {
 			h32 := sha256.Sum256([]byte(body.Token))
 			return "fission-" + hex.EncodeToString(h32[:8])