Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-05-07 10:35:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

updated checkAccountPermissions to call requireUser, and added new hook for plugins to handle auth login

Browse Source
This commit is contained in:
Julian Lam
2015-04-03 21:15:22 -04:00
parent 1ade973e56
commit 40834cc010
1 changed files with 24 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
src/middleware/middleware.js
View File

@@ -32,6 +32,12 @@ var app,
middleware.authenticate = function(req, res, next) {
if (req.user) {
return next();
} else if (plugins.hasListeners('action:middleware.authenticate')) {
return plugins.fireHook('action:middleware.authenticate', {
req: req,
res: res,
next: next
});
}
controllers.helpers.notAllowed(req, res);
@@ -124,29 +130,31 @@ middleware.checkGlobalPrivacySettings = function(req, res, next) {
middleware.checkAccountPermissions = function(req, res, next) {
// This middleware ensures that only the requested user and admins can pass
if (!req.uid) {
return controllers.helpers.notAllowed(req, res);
}
user.getUidByUserslug(req.params.userslug, function (err, uid) {
middleware.authenticate(req, res, function(err) {
if (err) {
return next(err);
}
if (!uid) {
return controllers.helpers.notFound(req, res);
}
if (parseInt(uid, 10) === req.uid) {
return next();
}
user.isAdministrator(req.uid, function(err, isAdmin) {
if (err || isAdmin) {
user.getUidByUserslug(req.params.userslug, function (err, uid) {
if (err) {
return next(err);
}
controllers.helpers.notAllowed(req, res);
if (!uid) {
return controllers.helpers.notFound(req, res);
}
if (parseInt(uid, 10) === req.uid) {
return next();
}
user.isAdministrator(req.uid, function(err, isAdmin) {
if (err || isAdmin) {
return next(err);
}
controllers.helpers.notAllowed(req, res);
});
});
});
};