added more unique req headers coming from travelling.

Phara0h · Apr 7, 2021 · a77da6e · a77da6e
1 parent ebff1a0
commit a77da6e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 7 deletions.
diff --git a/include/server/router.js b/include/server/router.js
@@ -130,15 +130,15 @@ class Router {
       // sets user id cookie every time to protect against tampering.
       if (authenticated && config.proxy.sendTravellingHeaders) {
         if (config.user.username.enabled) {
-          req.headers['un'] = sessionUser.username;
+          req.headers['t-user'] = sessionUser.username;
         }
 
-        req.headers['gn'] = routedGroup.name;
-        req.headers['gt'] = routedGroup.type;
-        req.headers['do'] = sessionUser.domain;
-        req.headers['uid'] = sessionUser.id;
-        req.headers['em'] = sessionUser.email;
-        req.headers['perm'] = r.name;
+        req.headers['t-grpn'] = routedGroup.name;
+        req.headers['t-grpt'] = routedGroup.type;
+        req.headers['t-dom'] = sessionUser.domain;
+        req.headers['t-id'] = sessionUser.id;
+        req.headers['t-email'] = sessionUser.email;
+        req.headers['t-perm'] = r.name;
       }
 
       if (req.raw.url.indexOf('/' + config.serviceName + '/') == 0 && !r.host) {

diff --git a/include/utils/auth.js b/include/utils/auth.js
@@ -33,6 +33,7 @@ var checkAuthHeader = async (req, res, router) => {
       return false;
     }
 
+    // Maybe optomize this with sessions?
     var user = await TokenHandler.checkAccessToken(splitAuth[1]);
 
     if (!user) {