fix missing OpenWebRX active-session authorization helper
This commit is contained in:
@@ -5437,6 +5437,20 @@ async function requireOpenWebRxTicketUser(req, res, url) {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
function canAuthorizeOpenWebRxByActiveSession() {
|
||||||
|
if (!runtime.station || !runtime.station.isInUse || !runtime.station.activeByUserId) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
if (!isOpenWebRxSessionActive()) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
const sessionOwner = String(runtime.openWebRxSession && runtime.openWebRxSession.activeOwnerUserId
|
||||||
|
? runtime.openWebRxSession.activeOwnerUserId
|
||||||
|
: "");
|
||||||
|
const stationOwner = String(runtime.station.activeByUserId || "");
|
||||||
|
return Boolean(sessionOwner && stationOwner && sessionOwner === stationOwner);
|
||||||
|
}
|
||||||
|
|
||||||
async function resolveOpenWebRxTicketAccess(req, url) {
|
async function resolveOpenWebRxTicketAccess(req, url) {
|
||||||
if (canAuthorizeOpenWebRxByActiveSession()) {
|
if (canAuthorizeOpenWebRxByActiveSession()) {
|
||||||
const activeUser = runtime.users.find((entry) => String(entry.id) === String(runtime.station.activeByUserId || ""));
|
const activeUser = runtime.users.find((entry) => String(entry.id) === String(runtime.station.activeByUserId || ""));
|
||||||
|
|||||||
Reference in New Issue
Block a user