From f5c69ae5e9beb388e3385b3345f33c96b1ad6225 Mon Sep 17 00:00:00 2001
From: lilly
Date: Sat, 18 Jul 2026 21:10:32 +0200
Subject: [PATCH] set authorized_keys file mode automatically from api process
---
api/src/dooris_api/keycloak.py | 3 +++
1 file changed, 3 insertions(+)
diff --git a/api/src/dooris_api/keycloak.py b/api/src/dooris_api/keycloak.py
index ab792aa..de99b92 100644
--- a/api/src/dooris_api/keycloak.py
+++ b/api/src/dooris_api/keycloak.py
@@ -2,6 +2,7 @@ from typing import List
from aiohttp import ClientSession, ClientRequest, ClientHandlerType, ClientResponse
import asyncio
import logging
+import stat
from pathlib import Path
from simple_openid_connect.client import OpenidClient
from simple_openid_connect.data import TokenErrorResponse
@@ -81,4 +82,6 @@ class KeycloakClient:
with self.authorized_keys_file.open(mode="wt", encoding="UTF-8") as f:
f.writelines(self.ssh_keys)
+ self.authorized_keys_file.chmod(stat.S_IWUSR | stat.S_IRUSR)
+