mirror of
https://github.com/Unleash/unleash.git
synced 2025-02-04 00:18:01 +01:00
fix: same site api call with session cookie
This commit is contained in:
parent
5d61b3903b
commit
02776c6bd6
@ -31,6 +31,7 @@ import NotFoundError from './error/notfound-error';
|
||||
import { bearerTokenMiddleware } from './middleware/bearer-token-middleware';
|
||||
import { auditAccessMiddleware } from './middleware';
|
||||
import { originMiddleware } from './middleware/origin-middleware';
|
||||
import { unlessHasHeader } from './middleware/unless-has-header-middleware';
|
||||
|
||||
export default async function getApp(
|
||||
config: IUnleashConfig,
|
||||
@ -90,7 +91,7 @@ export default async function getApp(
|
||||
),
|
||||
);
|
||||
if (unleashSession) {
|
||||
app.use(unleashSession);
|
||||
app.use(unlessHasHeader('authorization', unleashSession));
|
||||
}
|
||||
app.use(secureHeaders(config));
|
||||
app.use(express.urlencoded({ extended: true }));
|
||||
|
11
src/lib/middleware/unless-has-header-middleware.ts
Normal file
11
src/lib/middleware/unless-has-header-middleware.ts
Normal file
@ -0,0 +1,11 @@
|
||||
import type { RequestHandler } from 'express';
|
||||
|
||||
export const unlessHasHeader =
|
||||
(header: string, middleware: RequestHandler): RequestHandler =>
|
||||
(req, res, next) => {
|
||||
if (req.headers[header]) {
|
||||
return next();
|
||||
} else {
|
||||
return middleware(req, res, next);
|
||||
}
|
||||
};
|
Loading…
Reference in New Issue
Block a user