CodeMirror/budibase
1
0
Fork 0
mirror of synced 2024-07-14 18:55:45 +12:00
Code Issues Projects Releases Wiki Activity

PR comments.

Browse source
This commit is contained in:
mike12345567 2023-03-16 16:49:31 +00:00
parent c106c3291a
commit 39bfbdfac1
2 changed files with 15 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
packages/backend-core/src/errors/errors.ts
View file

@ -16,6 +16,7 @@ export abstract class BudibaseError extends Error {
export enum ErrorCode {
USAGE_LIMIT_EXCEEDED = "usage_limit_exceeded",
FEATURE_DISABLED = "feature_disabled",
INVALID_API_KEY = "invalid_api_key",
HTTP = "http",
}
@ -85,3 +86,14 @@ export class FeatureDisabledError extends HTTPError {
}
}
}
// AUTH
export class InvalidAPIKeyError extends BudibaseError {
constructor() {
super(
"Invalid API key - may need re-generated, or user doesn't exist",
ErrorCode.INVALID_API_KEY
)
}
}

9
packages/backend-core/src/middleware/authenticated.ts
View file

@ -14,6 +14,7 @@ import { decrypt } from "../security/encryption"
import * as identity from "../context/identity"
import env from "../environment"
import { Ctx, EndpointMatcher } from "@budibase/types"
import { InvalidAPIKeyError, ErrorCode } from "../errors"
const ONE_MINUTE = env.SESSION_UPDATE_PERIOD
? parseInt(env.SESSION_UPDATE_PERIOD)
@ -68,11 +69,7 @@ async function checkApiKey(apiKey: string, populateUser?: Function) {
user: await getUser(userId, tenantId, populateUser),
}
} else {
throw {
message:
"Invalid API key - may need re-generated, or user doesn't exist",
name: "InvalidApiKey",
}
throw new InvalidAPIKeyError()
}
})
}
@ -175,7 +172,7 @@ export default function (
// invalid token, clear the cookie
if (err?.name === "JsonWebTokenError") {
clearCookie(ctx, Cookie.Auth)
} else if (err?.name === "InvalidApiKey") {
} else if (err?.code === ErrorCode.INVALID_API_KEY) {
ctx.throw(403, err.message)
}
// allow configuring for public access