yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-11-12 08:08:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Upgrade api token tuto to not break rbac feature (#7250)

Browse Source 
Signed-off-by: Alexandre Bodin <bodin.alex@gmail.com>
This commit is contained in:
Alexandre BODIN 2020-07-29 17:41:02 +02:00 committed by GitHub
parent c3f4afca87
commit cba02febf2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/v3.x/guides/api-token.md
View File

@ -44,6 +44,11 @@ const _ = require('lodash');
module.exports = async (ctx, next) => { module.exports = async (ctx, next) => {
let role; let role;
if (ctx.state.user) {
// request is already authenticated in a different way
return next();
}
// add the detection of `token` query parameter // add the detection of `token` query parameter
if ( if (
(ctx.request && ctx.request.header && ctx.request.header.authorization) || (ctx.request && ctx.request.header && ctx.request.header.authorization) ||