Ignore _RevoableSession "header" that is sent by JS SDK. Fixes #1548. (#1627)

2016-04-25 12:52:21 -07:00
parent 234d0093ff
commit 957b5927b1
4 changed files with 44 additions and 16 deletions
--- a/src/middlewares.js
+++ b/src/middlewares.js
@@ -45,6 +45,10 @@ function handleParseHeaders(req, res, next) {
      fileViaJSON = true;
    }

+    if (req.body) {
+      delete req.body._RevocableSession;
+    }
+
    if (req.body &&
      req.body._ApplicationId &&
      cache.apps.get(req.body._ApplicationId) &&