mirror of
https://github.com/ether/etherpad-lite.git
synced 2025-04-20 23:46:14 -04:00
access controls: promisification
`getPadAccess()` (src/node/padaccess.js) is now "promise only", resolving to `true` or `false` as appropriate, and throwing an exception if there's an error. The two call sites (padreadonly.js and importexport.js) updated to match.
This commit is contained in:
parent
34fdaa4e8c
commit
d5d28717c4
3 changed files with 39 additions and 70 deletions
|
@ -1,57 +1,26 @@
|
|||
var async = require('async');
|
||||
var ERR = require("async-stacktrace");
|
||||
var readOnlyManager = require("../../db/ReadOnlyManager");
|
||||
var hasPadAccess = require("../../padaccess");
|
||||
var exporthtml = require("../../utils/ExportHtml");
|
||||
|
||||
exports.expressCreateServer = function (hook_name, args, cb) {
|
||||
// serve read only pad
|
||||
args.app.get('/ro/:id', function(req, res) {
|
||||
var html;
|
||||
var padId;
|
||||
args.app.get('/ro/:id', async function(req, res) {
|
||||
|
||||
async.series([
|
||||
// translate the read only pad to a padId
|
||||
function(callback) {
|
||||
readOnlyManager.getPadId(req.params.id, function(err, _padId) {
|
||||
if(ERR(err, callback)) return;
|
||||
// translate the read only pad to a padId
|
||||
let padId = await readOnlyManager.getPadId(req.params.id);
|
||||
if (padId == null) {
|
||||
res.status(404).send('404 - Not Found');
|
||||
return;
|
||||
}
|
||||
|
||||
padId = _padId;
|
||||
// we need that to tell hasPadAcess about the pad
|
||||
req.params.pad = padId;
|
||||
|
||||
// we need that to tell hasPadAcess about the pad
|
||||
req.params.pad = padId;
|
||||
|
||||
callback();
|
||||
});
|
||||
},
|
||||
if (await hasPadAccess(req, res)) {
|
||||
// render the html document
|
||||
function(callback) {
|
||||
// return if the there is no padId
|
||||
if(padId == null) {
|
||||
callback("notfound");
|
||||
return;
|
||||
}
|
||||
|
||||
hasPadAccess(req, res, function() {
|
||||
// render the html document
|
||||
exporthtml.getPadHTMLDocument(padId, null, function(err, _html) {
|
||||
if(ERR(err, callback)) return;
|
||||
html = _html;
|
||||
callback();
|
||||
});
|
||||
});
|
||||
}
|
||||
],
|
||||
function(err) {
|
||||
// throw any unexpected error
|
||||
if(err && err != "notfound")
|
||||
ERR(err);
|
||||
|
||||
if(err == "notfound")
|
||||
res.status(404).send('404 - Not Found');
|
||||
else
|
||||
res.send(html);
|
||||
});
|
||||
html = await exporthtml.getPadHTMLDocument(padId, null);
|
||||
res.send(html);
|
||||
}
|
||||
});
|
||||
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue