gaspersic/freeCodeCamp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix(api): add /auth paths to whitelist (#38383)

Browse Source
This commit is contained in:
mrugesh
2020-03-18 17:49:42 +05:30
committed by GitHub
parent 7613df56e1
commit 933e289617
2 changed files with 40 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
api-server/server/middlewares/request-authorization.js
View File

@ -11,23 +11,25 @@ import { jwtSecret as _jwtSecret } from '../../../config/secrets';
import { wrapHandledError } from '../utils/create-handled-error';
const authRE = /^\/auth\//;
const newsShortLinksRE = /^\/n\/|^\/p\//;
const showCertRE = /^\/certificate\/showCert\//;
const updatePaypalRE = /^\/donate\/update-paypal/;
// signin may not have a trailing slash
const signinRE = /^\/signin/;
const unsubscribeRE = /^\/u\/|^\/unsubscribe\/|^\/ue\//;
const unsubscribedRE = /^\/unsubscribed\//;
const resubscribeRE = /^\/resubscribe\//;
const showCertRE = /^\/certificate\/showCert\//;
// note: signin may not have a trailing slash
const signinRE = /^\/signin/;
const unsubscribedRE = /^\/unsubscribed\//;
const unsubscribeRE = /^\/u\/|^\/unsubscribe\/|^\/ue\//;
const updatePaypalRE = /^\/donate\/update-paypal/;
const _whiteListREs = [
authRE,
newsShortLinksRE,
resubscribeRE,
showCertRE,
updatePaypalRE,
signinRE,
unsubscribeRE,
unsubscribedRE,
resubscribeRE
unsubscribeRE,
updatePaypalRE
];
export function isWhiteListedPath(path, whiteListREs = _whiteListREs) {