x/onedrive
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

handle trailing slashes in protected routes

Browse source
This commit is contained in:
myl7 2022-08-04 05:10:02 +00:00
parent 7853fce887
commit 9af1ef4f47
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
pages/api/index.ts
View file

@ -82,9 +82,12 @@ export async function getAccessToken(): Promise<string> {
* @returns Path to required auth token. If not required, return empty string.
*/
export function getAuthTokenPath(path: string) {
// Ensure trailing slashes to compare paths component by component. Same for protectedRoutes.
path += '/'
const protectedRoutes = siteConfig.protectedRoutes
let authTokenPath = ''
for (const r of protectedRoutes) {
for (let r of protectedRoutes) {
r = r.replace(/\/$/, '') + '/'
if (path.startsWith(r)) {
authTokenPath = `${r}/.password`
break
@ -185,7 +188,8 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
res.status(400).json({ error: 'Path query invalid.' })
return
}
const cleanPath = pathPosix.resolve('/', pathPosix.normalize(path))
// Besides normalizing and making absolute, trailing slashes are trimmed
const cleanPath = pathPosix.resolve('/', pathPosix.normalize(path)).replace(/\/$/, '')
// Validate sort param
if (typeof sort !== 'string') {