joe/kami-parse-server
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactor masterKeyIps and update readme (#4050)

Browse Source 
* update choose_password to have the confirmation

* just a revert to the old one

* refactor and update readme

* just revert some spaces
This commit is contained in:
Worathiti Manosroi
2017-09-09 19:24:43 +02:00
committed by Florent Vilmart
parent 952e64d94a
commit 52c4dd3704
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@@ -223,6 +223,7 @@ The client keys used with Parse are no longer necessary with Parse Server. If yo
* `passwordPolicy` - Optional password policy rules to enforce.
* `customPages` - A hash with urls to override email verification links, password reset links and specify frame url for masking user-facing pages. Available keys: `parseFrameURL`, `invalidLink`, `choosePassword`, `passwordResetSuccess`, `verifyEmailSuccess`.
* `middleware` - (CLI only), a module name, function that is an express middleware. When using the CLI, the express app will load it just **before** mounting parse-server on the mount path. This option is useful for injecting a monitoring middleware.
* `masterKeyIps` - The array of ip addresses where masterKey usage will be restricted to only these ips. (Default to [] which means allow all ips). If you're using this feature and have `useMasterKey: true` in cloudcode, make sure that you put your own ip in this list.
##### Logging

3
src/middlewares.js
View File

@@ -111,8 +111,7 @@ export function handleParseHeaders(req, res, next) {
req.config.headers = req.headers || {};
req.info = info;
const ip = getClientIp(req);
if (info.masterKey && req.config.masterKeyIps && req.config.masterKeyIps.length !== 0 && req.config.masterKeyIps.indexOf(ip) === -1) {
if (info.masterKey && req.config.masterKeyIps && req.config.masterKeyIps.length !== 0 && req.config.masterKeyIps.indexOf(getClientIp(req)) === -1) {
return invalidRequest(req, res);
}