Add stripLegacyToken property in config.js to avoid passing the legacy token to subrequests

This commit is contained in:
Antonio Calanducci 2024-05-31 15:12:27 +02:00
parent 2dece4c576
commit 5e42773344
2 changed files with 8 additions and 1 deletions

View File

@ -4,6 +4,7 @@ var config = {
"pep_credentials": "pep_credentials",
"debug": true,
"legacy": true,
"stripLegacyToken": false,
"accounting": {
"scopes": ["authorized_scope1", "authorizeed_scope2"],
"service_name": "docker_stack_name",

View File

@ -73,7 +73,13 @@ function enforce_legacy(r) {
// debug(context, "Context again:\n" + njs.dump(context));
context.userinfo = userinfo
context.record = buildAccountingRecord_legacy(context)
return context.request.subrequest("/_backend", { method: context.request.method, args: JSON.stringify(context.request.args), headers: context.request.headersIn })
if (context.config["stripLegacyToken"] == true) {
var subreq_args = JSON.parse(JSON.stringify(context.request.args));
delete subreq_args["gcube-token"];
} else {
var subreq_args = context.request.args;
}
return context.request.subrequest("/_backend", { method: context.request.method, args: JSON.stringify(subreq_args), headers: context.request.headersIn })
}).then(reply => {
// debug(context, "response from backend\n" + reply.responseText);
debug(context, "Response status from backend: " + reply.status)