mirror of
https://github.com/nextcloud/server.git
synced 2026-02-27 03:50:37 -05:00
1df23140b8
If a session timed out or was closed in another tab, then currently the user gets random error messages. This intercepts 401 responses (should only happen if logged out, or the users does something wrong). If we get a 401, we make sure its because of the session, by checking if the user can access the files app. If that is also the case we forward the user to the login page and set the redirect URL to the last used URL. Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
113 lines
3.3 KiB
JavaScript
113 lines
3.3 KiB
JavaScript
/**
|
|
* SPDX-FileCopyrightText: 2023 Nextcloud GmbH and Nextcloud contributors
|
|
* SPDX-License-Identifier: AGPL-3.0-or-later
|
|
*/
|
|
|
|
import { getCurrentUser } from '@nextcloud/auth'
|
|
import { generateUrl, getRootUrl } from '@nextcloud/router'
|
|
|
|
/**
|
|
*
|
|
* @param {string} url the URL to check
|
|
* @return {boolean}
|
|
*/
|
|
const isRelativeUrl = (url) => {
|
|
return !url.startsWith('https://') && !url.startsWith('http://')
|
|
}
|
|
|
|
/**
|
|
* @param {string} url The URL to check
|
|
* @return {boolean} true if the URL points to this nextcloud instance
|
|
*/
|
|
const isNextcloudUrl = (url) => {
|
|
const nextcloudBaseUrl = window.location.protocol + '//' + window.location.host + getRootUrl()
|
|
// if the URL is absolute and starts with the baseUrl+rootUrl
|
|
// OR if the URL is relative and starts with rootUrl
|
|
return url.startsWith(nextcloudBaseUrl)
|
|
|| (isRelativeUrl(url) && url.startsWith(getRootUrl()))
|
|
}
|
|
|
|
/**
|
|
* Check if a user was logged in but is now logged-out.
|
|
* If this is the case then the user will be forwarded to the login page.
|
|
* @returns {Promise<void>}
|
|
*/
|
|
async function checkLoginStatus() {
|
|
// skip if no logged in user
|
|
if (getCurrentUser() === null) {
|
|
return
|
|
}
|
|
|
|
// skip if already running
|
|
if (checkLoginStatus.running === true) {
|
|
return
|
|
}
|
|
|
|
// only run one request in parallel
|
|
checkLoginStatus.running = true
|
|
|
|
try {
|
|
// We need to check this as a 401 in the first place could also come from other reasons
|
|
const { status } = await window.fetch(generateUrl('/apps/files'))
|
|
if (status === 401) {
|
|
console.warn('User session was terminated, forwarding to login page.')
|
|
window.location = generateUrl('/login?redirect_url={url}', {
|
|
url: window.location.pathname + window.location.search + window.location.hash,
|
|
})
|
|
}
|
|
} catch (error) {
|
|
console.warn('Could not check login-state')
|
|
} finally {
|
|
delete checkLoginStatus.running
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Intercept XMLHttpRequest and fetch API calls to add X-Requested-With header
|
|
*
|
|
* This is also done in @nextcloud/axios but not all requests pass through that
|
|
*/
|
|
export const interceptRequests = () => {
|
|
XMLHttpRequest.prototype.open = (function(open) {
|
|
return function(method, url, async) {
|
|
open.apply(this, arguments)
|
|
if (isNextcloudUrl(url)) {
|
|
if (!this.getResponseHeader('X-Requested-With')) {
|
|
this.setRequestHeader('X-Requested-With', 'XMLHttpRequest')
|
|
}
|
|
this.addEventListener('loadend', function() {
|
|
if (this.status === 401) {
|
|
checkLoginStatus()
|
|
}
|
|
})
|
|
}
|
|
}
|
|
})(XMLHttpRequest.prototype.open)
|
|
|
|
window.fetch = (function(fetch) {
|
|
return async (resource, options) => {
|
|
// fetch allows the `input` to be either a Request object or any stringifyable value
|
|
if (!isNextcloudUrl(resource.url ?? resource.toString())) {
|
|
return await fetch(resource, options)
|
|
}
|
|
if (!options) {
|
|
options = {}
|
|
}
|
|
if (!options.headers) {
|
|
options.headers = new Headers()
|
|
}
|
|
|
|
if (options.headers instanceof Headers && !options.headers.has('X-Requested-With')) {
|
|
options.headers.append('X-Requested-With', 'XMLHttpRequest')
|
|
} else if (options.headers instanceof Object && !options.headers['X-Requested-With']) {
|
|
options.headers['X-Requested-With'] = 'XMLHttpRequest'
|
|
}
|
|
|
|
const response = await fetch(resource, options)
|
|
if (response.status === 401) {
|
|
checkLoginStatus()
|
|
}
|
|
return response
|
|
}
|
|
})(window.fetch)
|
|
}
|