Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-20 01:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

core: redirect requests with incorrect domainId

Browse Source
This commit is contained in:
undefined committed 2023-03-12 23:21:08 +08:00
1 parent 3581ccb065
commit cb741b346c
1 file changed
+10 -4
Download Patch File Download Diff File Expand all files Collapse all files
packages/hydrooj/src/service/layers/domain.ts
+10 -4
View File
@@ -2,8 +2,9 @@ import BlackListModel from '../../model/blacklist';
import DomainModel from '../../model/domain'; import DomainModel from '../../model/domain';
import * as system from '../../model/system'; import * as system from '../../model/system';
import token from '../../model/token'; import token from '../../model/token';
import { KoaContext } from '../server';
export default async (ctx, next) => { export default async (ctx: KoaContext, next) => {
const forceDomain = /^\/d\/([^/]+)\//.exec(ctx.request.path); const forceDomain = /^\/d\/([^/]+)\//.exec(ctx.request.path);
ctx.originalPath = ctx.request.path; ctx.originalPath = ctx.request.path;
ctx.path = ctx.request.path = ctx.request.path.replace(/^\/d\/[^/]+\//, '/'); ctx.path = ctx.request.path = ctx.request.path.replace(/^\/d\/[^/]+\//, '/');
@@ -20,7 +21,7 @@ export default async (ctx, next) => {
DomainModel.get(domainId), DomainModel.get(domainId),
forceDomain ? Promise.resolve() : DomainModel.getByHost(host), forceDomain ? Promise.resolve() : DomainModel.getByHost(host),
BlackListModel.get(`ip::${ip}`), BlackListModel.get(`ip::${ip}`),
token.get(sid, token.TYPE_SESSION), token.get(sid instanceof Array ? sid[0] : sid, token.TYPE_SESSION),
]); ]);
if (bdoc) { if (bdoc) {
ctx.body = 'blacklisted'; // Just return 404 if blacklisted ctx.body = 'blacklisted'; // Just return 404 if blacklisted
@@ -29,6 +30,11 @@ export default async (ctx, next) => {
if (inferDomain) domainId = inferDomain._id; if (inferDomain) domainId = inferDomain._id;
ctx.domainId = domainId; ctx.domainId = domainId;
ctx.domainInfo = inferDomain || absoluteDomain; ctx.domainInfo = inferDomain || absoluteDomain;
ctx.session = session || { uid: 0 }; if (domainId !== ctx.domainInfo._id) {
await next(); // Case sensitive
ctx.redirect(ctx.originalPath.replace(/^\/d\/[^/]+\//, `/d/${ctx.domainInfo._id}/`));
} else {
ctx.session = session || { uid: 0 };
await next();
}
}; };