summaryrefslogtreecommitdiffstats
path: root/apps/files_versions
diff options
context:
space:
mode:
authorVarun Patil <varunpatil@ucla.edu>2023-10-30 10:52:08 -0700
committerskjnldsv <skjnldsv@protonmail.com>2024-02-28 19:23:47 +0100
commitb03fd6e363ef75ec69c5150b8992a838f724ce45 (patch)
treeebe8428c555863fbdcb3d477726995a661d66be8 /apps/files_versions
parentdfd42307f04148f09a9f9811323178d4657fcc0a (diff)
downloadnextcloud-server-b03fd6e363ef75ec69c5150b8992a838f724ce45.tar.gz
nextcloud-server-b03fd6e363ef75ec69c5150b8992a838f724ce45.zip
fix(dav): multiple fixes in usage of webdav library
1. Refresh token on update 2. Fix some very weird imports 3. Patch fetch instead of request to prevent accessing impl details Signed-off-by: Varun Patil <varunpatil@ucla.edu>
Diffstat (limited to 'apps/files_versions')
-rw-r--r--apps/files_versions/src/utils/davClient.js30
1 files changed, 19 insertions, 11 deletions
diff --git a/apps/files_versions/src/utils/davClient.js b/apps/files_versions/src/utils/davClient.js
index 022d34bbba4..b091935fc31 100644
--- a/apps/files_versions/src/utils/davClient.js
+++ b/apps/files_versions/src/utils/davClient.js
@@ -21,17 +21,25 @@
import { createClient } from 'webdav'
import { generateRemoteUrl } from '@nextcloud/router'
-import { getRequestToken } from '@nextcloud/auth'
+import { getRequestToken, onRequestTokenUpdate } from '@nextcloud/auth'
+// init webdav client
const rootPath = 'dav'
-
-// init webdav client on default dav endpoint
const remote = generateRemoteUrl(rootPath)
-export default createClient(remote, {
- headers: {
- // Add this so the server knows it is an request from the browser
- 'X-Requested-With': 'XMLHttpRequest',
- // Inject user auth
- requesttoken: getRequestToken() ?? '',
- },
-})
+const client = createClient(remote)
+
+// set CSRF token header
+const setHeaders = (token) => {
+ client.setHeaders({
+ // Add this so the server knows it is an request from the browser
+ 'X-Requested-With': 'XMLHttpRequest',
+ // Inject user auth
+ requesttoken: token ?? '',
+ })
+}
+
+// refresh headers when request token changes
+onRequestTokenUpdate(setHeaders)
+setHeaders(getRequestToken())
+
+export default client \ No newline at end of file