Archives/gristlabs_grist-core
1
0
Fork 0
mirror of https://github.com/gristlabs/grist-core.git synced 2024-10-27 20:44:07 +00:00
Code Issues Projects Releases Wiki Activity

[authorizer] Determine auth header to use via an environment variable

Browse Source
This commit is contained in:
Thomas Karolski 2022-03-12 20:31:17 +01:00 committed by Thomas Karolski
parent c459037b04
commit 9f3ed989c4
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/server/lib/Authorizer.ts
View File

@ -92,16 +92,14 @@ export function isSingleUserMode(): boolean {
/** /**
* Returns a profile if it can be deduced from the request. This requires a * Returns a profile if it can be deduced from the request. This requires a
* header to specify the users' email address. * header to specify the users' email address. The header to set comes from the
* environment variable GRIST_PROXY_AUTH_HEADER.
*/ */
export function getRequestProfile(req: Request): UserProfile|undefined { export function getRequestProfile(req: Request): UserProfile|undefined {
// Try to determine user based on 'x-remote-user' header passed via a webserver rewrite rule. const header = process.env.GRIST_PROXY_AUTH_HEADER;
// TODO: The header should probably be set via an environment variable and if it is not set,
// this code path should be disabled altogether.
let header:string = "x-remote-user";
let profile: UserProfile|undefined; let profile: UserProfile|undefined;
if (req.headers && req.headers[header]) { if (header && req.headers && req.headers[header]) {
let headerContent = req.headers[header]; let headerContent = req.headers[header];
if (headerContent) { if (headerContent) {
const userEmail = headerContent.toString(); const userEmail = headerContent.toString();