moving layergroup-token middleware to middlewarify style

This commit is contained in:
Simon 2017-09-27 16:32:49 +02:00
parent ac474cb253
commit 178b9e8563
3 changed files with 14 additions and 18 deletions

View File

@ -1,12 +1,12 @@
const cleanUpQueryParams = require('./clean-up-query-params');
const parseTokenParam = require('./parse-token-param');
const layergroupToken = require('./layergroup-token');
const authorize = require('./authorize');
const dbConnSetup = require('./db-conn-setup');
module.exports = function prepareContextMiddleware(authApi, pgConnection) {
return [
cleanUpQueryParams(),
parseTokenParam(),
layergroupToken,
authorize(authApi),
dbConnSetup(pgConnection)
];

View File

@ -1,4 +1,4 @@
var LayergroupToken = require('../models/layergroup-token');
var LayergroupToken = require('../../models/layergroup-token');
module.exports = function layergroupTokenMiddleware(req, res, next) {
if (!req.params.hasOwnProperty('token')) {
@ -16,18 +16,15 @@ module.exports = function layergroupTokenMiddleware(req, res, next) {
if (!req.params.signer) {
req.params.signer = user;
} else if (req.params.signer !== user) {
var statusCode = 403;
var err = new Error(`Cannot use map signature of user "${req.params.signer}" on db of user "${user}"`);
err.type = 'auth';
err.http_status = 403;
if (req.query && req.query.callback) {
statusCode = 200;
err.http_status = 200;
}
var errorMessage = `Cannot use map signature of user "${req.params.signer}" on db of user "{${user}"`;
return res.status(statusCode).json({
errors: [errorMessage],
errors_with_context: [{
type: 'auth',
message: errorMessage
}]
});
req.profiler.done('req2params');
return next(err);
}
}

View File

@ -1,6 +1,7 @@
var _ = require('underscore');
var serverOptions = require('../../../../lib/cartodb/server_options');
var mapnik = require('windshaft').mapnik;
var LayergroupToken = require('../../../../lib/cartodb/models/layergroup-token');
var OverviewsQueryRewriter = require('../../../../lib/cartodb/utils/overviews_query_rewriter');
var overviewsQueryRewriter = new OverviewsQueryRewriter({
zoom_level: 'CDB_ZoomFromScale(!scale_denominator!)'
@ -56,11 +57,9 @@ module.exports = _.extend({}, serverOptions, {
// this is in case you want to test sql parameters eg ...png?sql=select * from my_table limit 10
req.params = _.extend({}, req.params);
// We don't want to inherit Date.now() `cache_buster` as it is the default value
// introduced by the middleware when no cache buster is found.
// We are only interested in the `token` for the ported tests.
delete req.params.cache_buster;
delete req.params.signer;
if (req.params.token) {
req.params.token = LayergroupToken.parse(req.params.token).token;
}
_.extend(req.params, req.query);
req.params.user = 'localhost';