CodeMirror/budibase
1
0
Fork 0
mirror of synced 2024-07-04 22:11:23 +12:00
Code Issues Projects Releases Wiki Activity

Fixing an issue with the public API loading for the first time in a multi-tenant environment, also fixing an issue in self host when switching between environments with different secrets.

Browse source
This commit is contained in:
mike12345567 2022-03-14 19:05:02 +00:00
parent d4e9e9d522
commit 5b79126dbf
2 changed files with 26 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
packages/backend-core/src/middleware/authenticated.js
View file

@ -5,7 +5,7 @@ const { getSession, updateSessionTTL } = require("../security/sessions")
const { buildMatcherRegex, matches } = require("./matchers") const { buildMatcherRegex, matches } = require("./matchers")
const env = require("../environment") const env = require("../environment")
const { SEPARATOR, ViewNames, queryGlobalView } = require("../../db") const { SEPARATOR, ViewNames, queryGlobalView } = require("../../db")
const { getGlobalDB } = require("../tenancy") const { getGlobalDB, doInTenant } = require("../tenancy")
const { decrypt } = require("../security/encryption") const { decrypt } = require("../security/encryption")
function finalise( function finalise(
@ -25,20 +25,25 @@ async function checkApiKey(apiKey, populateUser) {
} }
const decrypted = decrypt(apiKey) const decrypted = decrypt(apiKey)
const tenantId = decrypted.split(SEPARATOR)[0] const tenantId = decrypted.split(SEPARATOR)[0]
const db = getGlobalDB(tenantId) return doInTenant(tenantId, async () => {
// api key is encrypted in the database const db = getGlobalDB()
const userId = await queryGlobalView( // api key is encrypted in the database
ViewNames.BY_API_KEY, const userId = await queryGlobalView(
{ ViewNames.BY_API_KEY,
key: apiKey, {
}, key: apiKey,
db },
) db
if (userId) { )
return { valid: true, user: await getUser(userId, tenantId, populateUser) } if (userId) {
} else { return {
throw "Invalid API key" valid: true,
} user: await getUser(userId, tenantId, populateUser),
}
} else {
throw "Invalid API key"
}
})
} }
/** /**

7
packages/worker/src/api/controllers/global/auth.js
View file

@ -85,7 +85,12 @@ exports.setInitInfo = ctx => {
} }
exports.getInitInfo = ctx => { exports.getInitInfo = ctx => {
ctx.body = getCookie(ctx, Cookies.Init) || {} try {
ctx.body = getCookie(ctx, Cookies.Init) || {}
} catch (err) {
clearCookie(ctx, Cookies.Init)
ctx.body = {}
}
} }
/** /**