Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-02 03:55:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #7125, allow list for page route, configurable via plugin hook

Browse Source
This commit is contained in:
Julian Lam
2021-01-25 16:01:10 -05:00
parent 8b72479f62
commit f975063b7d
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/middleware/user.js
View File

@@ -249,12 +249,17 @@ module.exports = function (middleware) {
res.status(403).render('403', { title: '[[global:403.title]]' }); res.status(403).render('403', { title: '[[global:403.title]]' });
}; };
middleware.registrationComplete = function registrationComplete(req, res, next) { middleware.registrationComplete = async function registrationComplete(req, res, next) {
// If the user's session contains registration data, redirect the user to complete registration // If the user's session contains registration data, redirect the user to complete registration
if (!req.session.hasOwnProperty('registration')) { if (!req.session.hasOwnProperty('registration')) {
return setImmediate(next); return setImmediate(next);
} }
if (!req.path.endsWith('/register/complete')) {
const path = req.path.startsWith('/api/') ? req.path.replace('/api', '') : req.path;
const { allowed } = await plugins.hooks.fire('filter:middleware.registrationComplete', {
allowed: ['/register/complete'],
});
if (!allowed.includes(path)) {
// Append user data if present // Append user data if present
req.session.registration.uid = req.uid; req.session.registration.uid = req.uid;