mirrors/etherpad-lite
1
0
Fork 0
mirror of https://github.com/ether/etherpad-lite.git synced 2025-04-21 16:06:16 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 26

tests: Add authentication, authorization bypass tests

Browse source
This commit is contained in:
Richard Hansen 2020-09-14 00:39:10 -04:00 • committed by John McLear
parent 80639fdc6a
commit 9e6d3f3f63
4 changed files with 210 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/node/hooks/express/socketio.js
View file

@ -51,6 +51,11 @@ exports.expressCreateServer = function (hook_name, args, cb) {
var cookieParserFn = cookieParser(webaccess.secret, {});
io.use((socket, next) => {
var data = socket.request;
if (!data.headers.cookie) {
// socketio.js-client on node.js doesn't support cookies (see https://git.io/JU8u9), so the
// token and express_sid cookies have to be passed via a query parameter for unit tests.
data.headers.cookie = socket.handshake.query.cookie;
}
if (!data.headers.cookie && settings.loadTest) {
console.warn('bypassing socket.io authentication check due to settings.loadTest');
return next(null, true);