diff options
author | Varun Patil <varunpatil@ucla.edu> | 2023-10-30 10:52:08 -0700 |
---|---|---|
committer | skjnldsv <skjnldsv@protonmail.com> | 2024-02-28 19:23:47 +0100 |
commit | b03fd6e363ef75ec69c5150b8992a838f724ce45 (patch) | |
tree | ebe8428c555863fbdcb3d477726995a661d66be8 /apps/files_versions | |
parent | dfd42307f04148f09a9f9811323178d4657fcc0a (diff) | |
download | nextcloud-server-b03fd6e363ef75ec69c5150b8992a838f724ce45.tar.gz nextcloud-server-b03fd6e363ef75ec69c5150b8992a838f724ce45.zip |
fix(dav): multiple fixes in usage of webdav library
1. Refresh token on update
2. Fix some very weird imports
3. Patch fetch instead of request to prevent accessing impl details
Signed-off-by: Varun Patil <varunpatil@ucla.edu>
Diffstat (limited to 'apps/files_versions')
-rw-r--r-- | apps/files_versions/src/utils/davClient.js | 30 |
1 files changed, 19 insertions, 11 deletions
diff --git a/apps/files_versions/src/utils/davClient.js b/apps/files_versions/src/utils/davClient.js index 022d34bbba4..b091935fc31 100644 --- a/apps/files_versions/src/utils/davClient.js +++ b/apps/files_versions/src/utils/davClient.js @@ -21,17 +21,25 @@ import { createClient } from 'webdav' import { generateRemoteUrl } from '@nextcloud/router' -import { getRequestToken } from '@nextcloud/auth' +import { getRequestToken, onRequestTokenUpdate } from '@nextcloud/auth' +// init webdav client const rootPath = 'dav' - -// init webdav client on default dav endpoint const remote = generateRemoteUrl(rootPath) -export default createClient(remote, { - headers: { - // Add this so the server knows it is an request from the browser - 'X-Requested-With': 'XMLHttpRequest', - // Inject user auth - requesttoken: getRequestToken() ?? '', - }, -}) +const client = createClient(remote) + +// set CSRF token header +const setHeaders = (token) => { + client.setHeaders({ + // Add this so the server knows it is an request from the browser + 'X-Requested-With': 'XMLHttpRequest', + // Inject user auth + requesttoken: token ?? '', + }) +} + +// refresh headers when request token changes +onRequestTokenUpdate(setHeaders) +setHeaders(getRequestToken()) + +export default client
\ No newline at end of file |