token-validator: Restrict grades API access to owner

Thanks-To: Elie Brami <elie.brami@epita.fr>

pkg/unbound/docker-entrypoint.sh

@@ -2,9 +2,9 @@
 
 set -e
 
-if [ `which unbound-$1 2>/dev/null` ]; then
+if [ `which "unbound-$1" 2>/dev/null` ]; then
   set -- unbound-"$@"
-elif [ ! `which $1 2>/dev/null` ]; then
+elif [ ! `which "$1" 2>/dev/null` ]; then
   set -- unbound -dv "$@"
 fi
 

token-validator/grades.go

@@ -7,7 +7,7 @@ import (
 )
 
 func init() {
-	router.GET("/api/grades/", apiHandler(computeGrades))
+	router.GET("/api/grades/", remoteValidatorHandler(apiHandler(computeGrades)))
 }
 
 func computeGrades(_ httprouter.Params, _ []byte) (interface{}, error) {

tuto3.yml

@@ -780,7 +780,7 @@ files:
   - path: /usr/sbin/join-maatma
     contents: |
       #!/bin/sh
-      [ -s "/var/lib/adlin/wireguard/adlin.token" ] && echo "A token is already defined. You'll erase it it you continue."
+      [ -s "/var/lib/adlin/wireguard/adlin.token" ] && echo "A token is already defined. You'll erase it if you continue."
       echo -n "Please copy your token here: "
       read WGTOKEN
       mkdir -p /var/lib/adlin/wireguard/