зеркало из https://github.com/mozilla/CSOL-site.git
Renaming helper function to respondWithForbidden.
This commit is contained in:
Родитель
28a5eb84a6
Коммит
d42beede14
|
@ -69,7 +69,7 @@ function handleIssuedClaim(email, code, callback) {
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
function respondWithError(res, reason) {
|
function respondWithForbidden(res, reason) {
|
||||||
return res.send(403, { status: 'forbidden', reason: reason });
|
return res.send(403, { status: 'forbidden', reason: reason });
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -81,22 +81,22 @@ function auth(req, res, next) {
|
||||||
const now = Date.now()/1000|0;
|
const now = Date.now()/1000|0;
|
||||||
var decodedToken, msg;
|
var decodedToken, msg;
|
||||||
if (!token)
|
if (!token)
|
||||||
return respondWithError(res, 'missing mandatory `auth` param');
|
return respondWithForbidden(res, 'missing mandatory `auth` param');
|
||||||
try {
|
try {
|
||||||
decodedToken = jwt.decode(token, JWT_SECRET);
|
decodedToken = jwt.decode(token, JWT_SECRET);
|
||||||
} catch(err) {
|
} catch(err) {
|
||||||
return respondWithError(res, 'error decoding JWT: ' + err.message);
|
return respondWithForbidden(res, 'error decoding JWT: ' + err.message);
|
||||||
}
|
}
|
||||||
if (decodedToken.prn !== email) {
|
if (decodedToken.prn !== email) {
|
||||||
msg = '`prn` mismatch: given %s, expected %s';
|
msg = '`prn` mismatch: given %s, expected %s';
|
||||||
return respondWithError(res, util.format(msg, decodedToken.prn, email));
|
return respondWithForbidden(res, util.format(msg, decodedToken.prn, email));
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!decodedToken.exp)
|
if (!decodedToken.exp)
|
||||||
return respondWithError(res, 'Token must have exp (expiration) set');
|
return respondWithForbidden(res, 'Token must have exp (expiration) set');
|
||||||
|
|
||||||
if (decodedToken.exp < now)
|
if (decodedToken.exp < now)
|
||||||
return respondWithError(res, 'Token has expired');
|
return respondWithForbidden(res, 'Token has expired');
|
||||||
|
|
||||||
return next();
|
return next();
|
||||||
}
|
}
|
||||||
|
|
Загрузка…
Ссылка в новой задаче