From 249c8460936135008a46d841a0fac8a8974ef9c9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Y=C3=BBki=20Vachot?= Date: Fri, 10 Dec 2021 17:02:11 +0100 Subject: [PATCH] Update: typeof missing --- app-backend/config/sessionJWT.config.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app-backend/config/sessionJWT.config.js b/app-backend/config/sessionJWT.config.js index 2541daa..30a959e 100644 --- a/app-backend/config/sessionJWT.config.js +++ b/app-backend/config/sessionJWT.config.js @@ -79,15 +79,15 @@ function checkLogin(req, res, role=null){ if(typeof req.cookies !== 'undefined'){ const session = getSession(req.cookies.SESSIONID); const token = getToken(session); - if(token.email === 'undefined' || token.email === -1){ + if(typeof token.email === 'undefined' || typeof token.email === 'undefined'){ return sendError(res, 500, 102, "User not authenticated."); } else { if(role === null){ return token; } else { - if(token.role !== 'undefined' && + if(typeof token.role !== 'undefined' && ((Array.isArray(role) && role.includes(token.role)) || - ( typeof role === 'object' && token.role.permission !== 'undefined' && token.role.permission >= role.permission && token.role.isAccepted === true))){ + ( typeof role === 'object' && typeof token.role.permission !== 'undefined' && token.role.permission >= role.permission && token.role.isAccepted === true))){ return token; } else { return sendError(res, 500, 106, "User doesn't have permission.", token);