admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2020-05-08 23:16:00 +00:00
parent 94bb06e249
commit c016031f01
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docs/8.0/ayanova/docs/api-error-codes.md
View File

@@ -16,6 +16,7 @@ Here are all the API level error codes that can be returned by the API server:
| 2003 | Authentication failed (HTTP STATUS 401), bad login or password, user not found | | 2003 | Authentication failed (HTTP STATUS 401), bad login or password, user not found |
| 2004 | Not authorized (HTTP STATUS 403) - current user is not authorized for operation attempted on the resource (insufficient rights) | | 2004 | Not authorized (HTTP STATUS 403) - current user is not authorized for operation attempted on the resource (insufficient rights) |
| 2005 | Object was changed by another user since retrieval (concurrency token mismatch). A record was attempted to be saved but another user has just modified it so it's invalid. (first save "wins") | | 2005 | Object was changed by another user since retrieval (concurrency token mismatch). A record was attempted to be saved but another user has just modified it so it's invalid. (first save "wins") |
| 2006 | Authentication token replaced - A valid JWT token was presented, but it has been replaced by a more recent login |
| 2010 | Object not found - API could not find the object requested | | 2010 | Object not found - API could not find the object requested |
| 2020 | PUT Id mismatch - object Id does not match route Id | | 2020 | PUT Id mismatch - object Id does not match route Id |
| 2030 | Invalid operation - operation could not be completed, not valid, details in message property | | 2030 | Invalid operation - operation could not be completed, not valid, details in message property |

6
server/AyaNova/Startup.cs
View File

@@ -398,11 +398,11 @@ namespace AyaNova
context.Request.HttpContext.Items["AY_TRANSLATION_ID"] = u.translationId; context.Request.HttpContext.Items["AY_TRANSLATION_ID"] = u.translationId;
//CHECK JWT //CHECK JWT
if (u.currentAuthToken != JWT) if (!context.Request.Path.Value.EndsWith("/Auth") && u.currentAuthToken != JWT)//except "/api/v8/Auth" so user can login May need other routes later?
{ {
context.Response.StatusCode = 401; context.Response.StatusCode = 401;
context.Response.Headers.Add("X-AyaNova-Authorization-Error", "Authorization token was replaced by more recent login"); context.Response.Headers.Add("X-AyaNova-Authorization-Error", "E2006 - Authorization token replaced by more recent login");
await context.Response.WriteAsync("Authorization token was replaced by more recent login"); await context.Response.WriteAsync("E2006 - Authorization token replaced by more recent login");
} }
else else
{ {