lbehm
/
workadventure
1
0
Fork 0
Code Issues Pull Requests Releases Activity

When sending an invalid token, the HTTP API from the Pusher now returns a 401 instead of an HTTP 500.

This commit is contained in:
David Négrier 2021-12-08 14:46:23 +01:00
parent ff77a18262
commit 598c7412a2
2 changed files with 14 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
front/src/Connexion/Room.ts
View File

@ -116,11 +116,12 @@ export class Room {
this._contactPage = data.contactPage || CONTACT_URL;
return new MapDetail(data.mapUrl, data.textures);
} catch (e) {
console.error("Error => getMapDetail", e, e.response);
//TODO fix me and manage Error class
if (e.response?.data === "Token decrypted error") {
if (axios.isAxiosError(e) && e.response?.status == 401 && e.response?.data === "Token decrypted error") {
console.warn("JWT token sent could not be decrypted. Maybe it expired?");
localUserStore.setAuthToken(null);
window.location.assign("/login");
} else {
console.error("Error => getMapDetail", e, e.response);
}
throw e;
}

15
pusher/src/Controller/MapController.ts
View File

@ -8,6 +8,7 @@ import { isMapDetailsData, MapDetailsData } from "../Services/AdminApi/MapDetail
import { socketManager } from "../Services/SocketManager";
import { AuthTokenData, jwtTokenManager } from "../Services/JWTTokenManager";
import { v4 } from "uuid";
import { InvalidTokenError } from "./InvalidTokenError";
export class MapController extends BaseController {
constructor(private App: TemplatedApp) {
@ -85,11 +86,15 @@ export class MapController extends BaseController {
userId = authTokenData.identifier;
console.info("JWT expire, but decoded", userId);
} catch (e) {
// The token was not good, redirect user on login page
res.writeStatus("500");
res.writeHeader("Access-Control-Allow-Origin", FRONT_URL);
res.end("Token decrypted error");
return;
if (e instanceof InvalidTokenError) {
// The token was not good, redirect user on login page
res.writeStatus("401 Unauthorized");
res.writeHeader("Access-Control-Allow-Origin", FRONT_URL);
res.end("Token decrypted error");
return;
} else {
return this.errorToResponse(e, res);
}
}
}
}