This commit is contained in:
stephb9959
2022-05-12 14:15:28 -07:00
parent 7b9013b049
commit e17f6cfd6c

View File

@@ -32,23 +32,14 @@ namespace OpenWifi {
} }
void RESTAPI_suboauth2_handler::DoDelete() { void RESTAPI_suboauth2_handler::DoDelete() {
bool Expired = false, Contacted = false; auto Token = GetBinding(RESTAPI::Protocol::TOKEN, "");
if (!IsAuthorized(Expired, Contacted, true)) { if(Token.empty() || (Token != SessionToken_)) {
if(Expired) return BadRequest(RESTAPI::Errors::MissingOrInvalidParameters);
return UnAuthorized(RESTAPI::Errors::EXPIRED_TOKEN);
return UnAuthorized(RESTAPI::Errors::INVALID_TOKEN);
} }
auto Token = GetBinding(RESTAPI::Protocol::TOKEN, "...");
if (Token == SessionToken_) {
AuthService()->SubLogout(Token); AuthService()->SubLogout(Token);
return ReturnStatus(Poco::Net::HTTPResponse::HTTP_NO_CONTENT, true); return ReturnStatus(Poco::Net::HTTPResponse::HTTP_NO_CONTENT, true);
} }
Logger_.information(fmt::format("BAD-LOGOUT({}): Request for {}", Request->clientAddress().toString(), UserInfo_.userinfo.email));
NotFound();
}
void RESTAPI_suboauth2_handler::DoPost() { void RESTAPI_suboauth2_handler::DoPost() {
const auto & Obj = ParsedBody_; const auto & Obj = ParsedBody_;
auto userId = GetS(RESTAPI::Protocol::USERID, Obj); auto userId = GetS(RESTAPI::Protocol::USERID, Obj);