NoLog.cz/etherpad
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity

express: Move preAuthorize middleware before express-session

Browse source
This commit is contained in:
Richard Hansen 2021-12-18 16:54:23 -05:00
parent bf35dcfc50
commit 0b1ec20c5c
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/node/hooks/express.js
View file

@ -201,11 +201,11 @@ exports.restartServer = async () => {
secure: 'auto', secure: 'auto',
}, },
}); });
app.use(exports.sessionMiddleware);
app.use(cookieParser(settings.sessionKey, {}));
// If webaccess.preAuthorize explicitly grants access, webaccess.checkAccess will skip all checks. // If webaccess.preAuthorize explicitly grants access, webaccess.checkAccess will skip all checks.
app.use(webaccess.preAuthorize); app.use(webaccess.preAuthorize);
app.use(exports.sessionMiddleware);
app.use(cookieParser(settings.sessionKey, {}));
app.use(webaccess.checkAccess); app.use(webaccess.checkAccess);
await Promise.all([ await Promise.all([