frodovdr/node-red
1
0
Fork 0
mirror of https://github.com/node-red/node-red.git synced 2025-03-01 10:36:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix auth on comms link and for anon user

Browse Source 
The move to honour scope level of token broke the comms link
checking as well as the permissions checking for anon users.
This commit is contained in:
Nick O'Leary
2015-03-29 22:27:07 +01:00
parent c8d6dc2531
commit f967a5ecdc
7 changed files with 49 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
red/api/auth/index.js
View File

@@ -101,7 +101,7 @@ module.exports = {
errorHandler: function(err,req,res,next) {
//TODO: standardize json response
//TODO: audit log statment
console.log(err.stack);
//console.log(err.stack);
//log.log({level:"audit",type:"auth",msg:err.toString()});
return server.errorHandler()(err,req,res,next);
},

2
red/api/auth/permissions.js
View File

@@ -38,7 +38,7 @@ function hasPermission(userScope,permission) {
}
if (util.isArray(permission)) {
for (var i=0;i<permission.length;i++) {
for (i=0;i<permission.length;i++) {
if (!hasPermission(userScope,permission[i])) {
return false;
}

4
red/api/auth/strategies.js
View File

@@ -80,7 +80,7 @@ var passwordTokenExchange = function(client, username, password, scope, done) {
Users.authenticate(username,password).then(function(user) {
if (user) {
if (permissions.hasPermission(user,scope)) {
if (permissions.hasPermission(user.permissions,scope)) {
loginAttempts = loginAttempts.filter(function(logEntry) {
return logEntry.user !== username;
});
@@ -107,7 +107,7 @@ AnonymousStrategy.prototype.authenticate = function(req) {
var self = this;
Users.default().then(function(anon) {
if (anon) {
self.success(anon);
self.success(anon,{scope:anon.permissions});
} else {
self.fail(401);
}