Fix missing session token when fetching a _User
This commit is contained in:
@@ -54,10 +54,17 @@ export class ClassesRouter {
|
|||||||
throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'Object not found.');
|
throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'Object not found.');
|
||||||
}
|
}
|
||||||
|
|
||||||
if(req.params.className === "_User"){
|
if (req.params.className === "_User") {
|
||||||
|
|
||||||
delete response.results[0].sessionToken;
|
delete response.results[0].sessionToken;
|
||||||
}
|
|
||||||
|
const user = response.results[0];
|
||||||
|
|
||||||
|
if (req.auth.user && user.objectId == req.auth.user.id) {
|
||||||
|
// Force the session token
|
||||||
|
response.results[0].sessionToken = req.info.sessionToken;
|
||||||
|
}
|
||||||
|
}
|
||||||
return { response: response.results[0] };
|
return { response: response.results[0] };
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user