33 lines
1.0 KiB
JavaScript
33 lines
1.0 KiB
JavaScript
var LayergroupToken = require('../../models/layergroup-token');
|
|
|
|
module.exports = function layergroupTokenMiddleware(req, res, next) {
|
|
if (!req.params.hasOwnProperty('token')) {
|
|
return next();
|
|
}
|
|
|
|
var user = req.context.user;
|
|
|
|
var layergroupToken = LayergroupToken.parse(req.params.token);
|
|
req.params.token = layergroupToken.token;
|
|
req.params.cache_buster = layergroupToken.cacheBuster;
|
|
|
|
if (layergroupToken.signer) {
|
|
req.params.signer = layergroupToken.signer;
|
|
if (!req.params.signer) {
|
|
req.params.signer = user;
|
|
} else if (req.params.signer !== user) {
|
|
var err = new Error(`Cannot use map signature of user "${req.params.signer}" on db of user "${user}"`);
|
|
err.type = 'auth';
|
|
err.http_status = 403;
|
|
if (req.query && req.query.callback) {
|
|
err.http_status = 200;
|
|
}
|
|
|
|
req.profiler.done('req2params');
|
|
return next(err);
|
|
}
|
|
}
|
|
|
|
return next();
|
|
};
|