mirror of
https://github.com/HabitRPG/habitica.git
synced 2025-12-19 15:48:04 +01:00
Move purl authentication to server/index.js and don't redirect. keep
them on that url
This commit is contained in:
@@ -47,10 +47,15 @@ root = path.dirname(path.dirname(__dirname));
|
||||
publicPath = path.join(root, 'public');
|
||||
|
||||
habitrpgMiddleware = function(req, res, next) {
|
||||
var model, _base;
|
||||
var acceptableUid, model, uidParam, _base;
|
||||
model = req.getModel();
|
||||
(_base = req.session).userId || (_base.userId = derby.uuid());
|
||||
model.setNull('_userId', req.session.userId);
|
||||
uidParam = req.url.split('/')[1];
|
||||
acceptableUid = require('guid').isGuid(uidParam) || (uidParam === '3' || uidParam === '9');
|
||||
if (acceptableUid && req.session.userId !== uidParam) {
|
||||
req.session.userId = uidParam;
|
||||
}
|
||||
model.set('_userId', req.session.userId);
|
||||
model.set('_mobileDevice', /Android|webOS|iPhone|iPad|iPod|BlackBerry/i.test(req.header('User-Agent')));
|
||||
model.set('_nodeEnv', process.env.NODE_ENV);
|
||||
require('./setupStore').accessControl(store);
|
||||
|
||||
Reference in New Issue
Block a user