Bläddra i källkod

Return a 'not authorized' error if the user is not logged in/authorized

James Allen 10 år sedan
förälder
incheckning
f4a465ea69
1 ändrade filer med 8 tillägg och 4 borttagningar
  1. 8 4
      services/real-time/app/coffee/Router.coffee

+ 8 - 4
services/real-time/app/coffee/Router.coffee

@@ -21,9 +21,13 @@ module.exports = Router =
 				attrs[key] = value
 				attrs[key] = value
 			attrs.client_id = client.id
 			attrs.client_id = client.id
 			attrs.err = error
 			attrs.err = error
-			logger.error attrs, "server side error in #{method}"
-		# Don't return raw error to prevent leaking server side info
-		return callback {message: "Something went wrong in real-time service"}
+			if error.message == "not authorized"
+				logger.warn attrs, "client is not authorized"
+				return callback {message: error.message}
+			else
+				logger.error attrs, "server side error in #{method}"
+				# Don't return raw error to prevent leaking server side info
+				return callback {message: "Something went wrong in real-time service"}
 
 
 	configure: (app, io, session) ->
 	configure: (app, io, session) ->
 		app.set("io", io)
 		app.set("io", io)
@@ -99,4 +103,4 @@ module.exports = Router =
 					if err?
 					if err?
 						Router._handleError callback, err, client, "applyOtUpdate", {doc_id, update}
 						Router._handleError callback, err, client, "applyOtUpdate", {doc_id, update}
 					else
 					else
-						callback()
+						callback()