verdnatura-mirror
/
loopback
mirror of https://github.com/strongloop/loopback.git
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3938 from mcitdev/master 

Make verifyUserRelations() more robust
This commit is contained in:
Miroslav Bajtoš 2018-07-03 09:18:39 +02:00 committed by GitHub
parent cd1b31920e f9e9aaa8ce
commit 7ad5a2e1bc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
lib/application.js
View File

@ -497,19 +497,19 @@ app._verifyAuthModelRelations = function() {
function verifyUserRelations(Model) { function verifyUserRelations(Model) {
const hasManyTokens = Model.relations && Model.relations.accessTokens; const hasManyTokens = Model.relations && Model.relations.accessTokens;
const relationsConfig = Model.settings.relations || {}; if (hasManyTokens) {
const hasPolyMorphicTokens = (relationsConfig.accessTokens || {}).polymorphic; // display a temp warning message for users using multiple users config
// display a temp warning message for users using multiple users config if (hasManyTokens.polymorphic) {
if (hasPolyMorphicTokens) { console.warn(
console.warn( 'The app configuration follows the multiple user models setup ' +
'The app configuration follows the multiple user models setup ' + 'as described in http://ibm.biz/setup-loopback-auth',
'as described in http://ibm.biz/setup-loopback-auth', 'The built-in role resolver $owner is not currently compatible ' +
'The built-in role resolver $owner is not currently compatible ' + 'with this configuration and should not be used in production.');
'with this configuration and should not be used in production.'); }
return;
} }
if (hasManyTokens) return; const relationsConfig = Model.settings.relations || {};
const accessTokenName = (relationsConfig.accessTokens || {}).model; const accessTokenName = (relationsConfig.accessTokens || {}).model;
if (accessTokenName) { if (accessTokenName) {
console.warn( console.warn(