diff --git a/spec/ParseUser.spec.js b/spec/ParseUser.spec.js index 787a8ecb..e173f9f8 100644 --- a/spec/ParseUser.spec.js +++ b/spec/ParseUser.spec.js @@ -1606,7 +1606,9 @@ describe('Parse.User testing', () => { }).then(function(newUser) { fail('Session should have been invalidated'); done(); - }, function() { + }, function(err) { + expect(err.code).toBe(209); + expect(err.message).toBe('invalid session token'); done(); }); }); diff --git a/src/RestWrite.js b/src/RestWrite.js index 2a2b0ed2..34e7ae94 100644 --- a/src/RestWrite.js +++ b/src/RestWrite.js @@ -306,7 +306,7 @@ RestWrite.prototype.transformUser = function() { if (!this.data.password) { return; } - if (this.query) { + if (this.query && !this.auth.isMaster ) { this.storage['clearSessions'] = true; } return passwordCrypto.hash(this.data.password).then((hashedPassword) => { diff --git a/src/Routers/UsersRouter.js b/src/Routers/UsersRouter.js index 5b894f75..c6ba1c1b 100644 --- a/src/Routers/UsersRouter.js +++ b/src/Routers/UsersRouter.js @@ -41,8 +41,7 @@ export class UsersRouter extends ClassesRouter { handleMe(req) { if (!req.info || !req.info.sessionToken) { - throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, - 'Object not found.'); + throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'invalid session token'); } return rest.find(req.config, Auth.master(req.config), '_Session', { _session_token: req.info.sessionToken }, @@ -51,8 +50,7 @@ export class UsersRouter extends ClassesRouter { if (!response.results || response.results.length == 0 || !response.results[0].user) { - throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, - 'Object not found.'); + throw new Parse.Error(Parse.Error.INVALID_SESSION_TOKEN, 'invalid session token'); } else { let user = response.results[0].user; return { response: user }; @@ -145,10 +143,10 @@ export class UsersRouter extends ClassesRouter { let router = new PromiseRouter(); router.route('GET', '/users', req => { return this.handleFind(req); }); router.route('POST', '/users', req => { return this.handleCreate(req); }); + router.route('GET', '/users/me', req => { return this.handleMe(req); }); router.route('GET', '/users/:objectId', req => { return this.handleGet(req); }); router.route('PUT', '/users/:objectId', req => { return this.handleUpdate(req); }); router.route('DELETE', '/users/:objectId', req => { return this.handleDelete(req); }); - router.route('GET', '/users/me', req => { return this.handleMe(req); }); router.route('GET', '/login', req => { return this.handleLogIn(req); }); router.route('POST', '/logout', req => { return this.handleLogOut(req); }); router.route('POST', '/requestPasswordReset', () => {