mirror of
https://github.com/Unleash/unleash.git
synced 2025-02-04 00:18:01 +01:00
fix: same site api call with session cookie
This commit is contained in:
parent
5d61b3903b
commit
02776c6bd6
@ -31,6 +31,7 @@ import NotFoundError from './error/notfound-error';
|
|||||||
import { bearerTokenMiddleware } from './middleware/bearer-token-middleware';
|
import { bearerTokenMiddleware } from './middleware/bearer-token-middleware';
|
||||||
import { auditAccessMiddleware } from './middleware';
|
import { auditAccessMiddleware } from './middleware';
|
||||||
import { originMiddleware } from './middleware/origin-middleware';
|
import { originMiddleware } from './middleware/origin-middleware';
|
||||||
|
import { unlessHasHeader } from './middleware/unless-has-header-middleware';
|
||||||
|
|
||||||
export default async function getApp(
|
export default async function getApp(
|
||||||
config: IUnleashConfig,
|
config: IUnleashConfig,
|
||||||
@ -90,7 +91,7 @@ export default async function getApp(
|
|||||||
),
|
),
|
||||||
);
|
);
|
||||||
if (unleashSession) {
|
if (unleashSession) {
|
||||||
app.use(unleashSession);
|
app.use(unlessHasHeader('authorization', unleashSession));
|
||||||
}
|
}
|
||||||
app.use(secureHeaders(config));
|
app.use(secureHeaders(config));
|
||||||
app.use(express.urlencoded({ extended: true }));
|
app.use(express.urlencoded({ extended: true }));
|
||||||
|
11
src/lib/middleware/unless-has-header-middleware.ts
Normal file
11
src/lib/middleware/unless-has-header-middleware.ts
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
import type { RequestHandler } from 'express';
|
||||||
|
|
||||||
|
export const unlessHasHeader =
|
||||||
|
(header: string, middleware: RequestHandler): RequestHandler =>
|
||||||
|
(req, res, next) => {
|
||||||
|
if (req.headers[header]) {
|
||||||
|
return next();
|
||||||
|
} else {
|
||||||
|
return middleware(req, res, next);
|
||||||
|
}
|
||||||
|
};
|
Loading…
Reference in New Issue
Block a user