github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2025-04-05 16:01:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

Return a 'not authorized' error if the user is not logged in/authorized

Browse source
This commit is contained in:
James Allen 2016-05-31 11:49:51 +01:00
parent 343ec9d708
commit f4a465ea69
1 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
services/real-time/app/coffee/Router.coffee
View file

@ -21,9 +21,13 @@ module.exports = Router =
attrs[key] = value
attrs.client_id = client.id
attrs.err = error
logger.error attrs, "server side error in #{method}"
# Don't return raw error to prevent leaking server side info
return callback {message: "Something went wrong in real-time service"}
if error.message == "not authorized"
logger.warn attrs, "client is not authorized"
return callback {message: error.message}
else
logger.error attrs, "server side error in #{method}"
# Don't return raw error to prevent leaking server side info
return callback {message: "Something went wrong in real-time service"}
configure: (app, io, session) ->
app.set("io", io)
@ -99,4 +103,4 @@ module.exports = Router =
if err?
Router._handleError callback, err, client, "applyOtUpdate", {doc_id, update}
else
callback()
callback()