mirror of
https://github.com/strapi/strapi.git
synced 2025-10-31 18:08:11 +00:00
28 lines
747 B
JavaScript
28 lines
747 B
JavaScript
'use strict';
|
|
|
|
/**
|
|
* Policy used to check if the `dashboardToken` field is valid.
|
|
*
|
|
* @param next
|
|
*/
|
|
|
|
module.exports = function * (next) {
|
|
// Format dashboardToken variables.
|
|
const dashboardTokenParam = this.header.dashboardtoken;
|
|
const dashboardTokenConfig = strapi.config.dashboard && strapi.config.dashboard.token;
|
|
|
|
// Check dashboardToken for security purposes.
|
|
if (!dashboardTokenParam || !dashboardTokenConfig || dashboardTokenParam !== dashboardTokenConfig) {
|
|
this.status = 401;
|
|
this.body = {
|
|
message: 'dashboardToken parameter is invalid.'
|
|
};
|
|
} else {
|
|
// Delete `dashboardToken` field.
|
|
delete this.request.query.dashboardToken;
|
|
delete this.request.body.dashboardToken;
|
|
|
|
yield next;
|
|
}
|
|
};
|