From ff52d6d80511a403dae03a59f76a50c7e3596c8d Mon Sep 17 00:00:00 2001 From: Rodrigo Nascimento Date: Wed, 27 Dec 2017 22:26:56 -0200 Subject: [PATCH] [FIX] File access not working when passing credentials via querystring --- .../rocketchat-file-upload/server/lib/FileUpload.js | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/packages/rocketchat-file-upload/server/lib/FileUpload.js b/packages/rocketchat-file-upload/server/lib/FileUpload.js index 3874f829c546..7ef2d5049117 100644 --- a/packages/rocketchat-file-upload/server/lib/FileUpload.js +++ b/packages/rocketchat-file-upload/server/lib/FileUpload.js @@ -173,14 +173,14 @@ Object.assign(FileUpload, { return true; } - let { uid, token } = query; + let { rc_uid, rc_token } = query; - if (!uid && headers.cookie) { - uid = cookie.get('rc_uid', headers.cookie) ; - token = cookie.get('rc_token', headers.cookie); + if (!rc_uid && headers.cookie) { + rc_uid = cookie.get('rc_uid', headers.cookie) ; + rc_token = cookie.get('rc_token', headers.cookie); } - if (!uid || !token || !RocketChat.models.Users.findOneByIdAndLoginToken(uid, token)) { + if (!rc_uid || !rc_token || !RocketChat.models.Users.findOneByIdAndLoginToken(rc_uid, rc_token)) { return false; }