3pp-mirror/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-05-06 10:35:54 +02:00
Code Issues Projects Releases Packages Wiki Activity

🐛 Properly send 403 on not authorized request.

Browse source
This commit is contained in:
Andrey Antukh 2019-12-20 22:54:58 +01:00
parent dabbbc2e09
commit fee2eea87c
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
backend/src/uxbox/http/session.clj
View file

@ -56,7 +56,7 @@
(spx/terminate (assoc data ::unauthorized true))))) (spx/terminate (assoc data ::unauthorized true)))))
(vc/handle-on-context)))) (vc/handle-on-context))))
:leave (fn [data] :leave (fn [data]
(if (and (::unauthorized data) (:response data)) (if (::unauthorized data)
(update data :response (update data :response
assoc :status 403 :body {:type :authentication assoc :status 403 :body {:type :authentication
:code :unauthorized}) :code :unauthorized})