fix missing OpenWebRX active-session authorization helper
This commit is contained in:
@@ -5437,6 +5437,20 @@ async function requireOpenWebRxTicketUser(req, res, url) {
|
||||
}
|
||||
}
|
||||
|
||||
function canAuthorizeOpenWebRxByActiveSession() {
|
||||
if (!runtime.station || !runtime.station.isInUse || !runtime.station.activeByUserId) {
|
||||
return false;
|
||||
}
|
||||
if (!isOpenWebRxSessionActive()) {
|
||||
return false;
|
||||
}
|
||||
const sessionOwner = String(runtime.openWebRxSession && runtime.openWebRxSession.activeOwnerUserId
|
||||
? runtime.openWebRxSession.activeOwnerUserId
|
||||
: "");
|
||||
const stationOwner = String(runtime.station.activeByUserId || "");
|
||||
return Boolean(sessionOwner && stationOwner && sessionOwner === stationOwner);
|
||||
}
|
||||
|
||||
async function resolveOpenWebRxTicketAccess(req, url) {
|
||||
if (canAuthorizeOpenWebRxByActiveSession()) {
|
||||
const activeUser = runtime.users.find((entry) => String(entry.id) === String(runtime.station.activeByUserId || ""));
|
||||
|
||||
Reference in New Issue
Block a user