1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
/**
* SPDX-FileCopyrightText: 2023 Nextcloud GmbH and Nextcloud contributors
* SPDX-License-Identifier: AGPL-3.0-or-later
*/
import { getCurrentUser } from '@nextcloud/auth'
import { generateUrl, getRootUrl } from '@nextcloud/router'
import logger from '../logger.js'
/**
*
* @param {string} url the URL to check
* @return {boolean}
*/
const isRelativeUrl = (url) => {
return !url.startsWith('https://') && !url.startsWith('http://')
}
/**
* @param {string} url The URL to check
* @return {boolean} true if the URL points to this nextcloud instance
*/
const isNextcloudUrl = (url) => {
const nextcloudBaseUrl = window.location.protocol + '//' + window.location.host + getRootUrl()
// if the URL is absolute and starts with the baseUrl+rootUrl
// OR if the URL is relative and starts with rootUrl
return url.startsWith(nextcloudBaseUrl)
|| (isRelativeUrl(url) && url.startsWith(getRootUrl()))
}
/**
* Check if a user was logged in but is now logged-out.
* If this is the case then the user will be forwarded to the login page.
* @returns {Promise<void>}
*/
async function checkLoginStatus() {
// skip if no logged in user
if (getCurrentUser() === null) {
return
}
// skip if already running
if (checkLoginStatus.running === true) {
return
}
// only run one request in parallel
checkLoginStatus.running = true
try {
// We need to check this as a 401 in the first place could also come from other reasons
const { status } = await window.fetch(generateUrl('/apps/files'))
if (status === 401) {
console.warn('User session was terminated, forwarding to login page.')
await wipeBrowserStorages()
window.location = generateUrl('/login?redirect_url={url}', {
url: window.location.pathname + window.location.search + window.location.hash,
})
}
} catch (error) {
console.warn('Could not check login-state')
} finally {
delete checkLoginStatus.running
}
}
/**
* Clear all Browser storages connected to current origin.
* @returns {Promise<void>}
*/
export async function wipeBrowserStorages() {
try {
window.localStorage.clear()
window.sessionStorage.clear()
const indexedDBList = await window.indexedDB.databases()
for (const indexedDB of indexedDBList) {
await window.indexedDB.deleteDatabase(indexedDB.name)
}
logger.debug('Browser storages cleared')
} catch (error) {
logger.error('Could not clear browser storages', { error })
}
}
/**
* Intercept XMLHttpRequest and fetch API calls to add X-Requested-With header
*
* This is also done in @nextcloud/axios but not all requests pass through that
*/
export const interceptRequests = () => {
XMLHttpRequest.prototype.open = (function(open) {
return function(method, url, async) {
open.apply(this, arguments)
if (isNextcloudUrl(url)) {
if (!this.getResponseHeader('X-Requested-With')) {
this.setRequestHeader('X-Requested-With', 'XMLHttpRequest')
}
this.addEventListener('loadend', function() {
if (this.status === 401) {
checkLoginStatus()
}
})
}
}
})(XMLHttpRequest.prototype.open)
window.fetch = (function(fetch) {
return async (resource, options) => {
// fetch allows the `input` to be either a Request object or any stringifyable value
if (!isNextcloudUrl(resource.url ?? resource.toString())) {
return await fetch(resource, options)
}
if (!options) {
options = {}
}
if (!options.headers) {
options.headers = new Headers()
}
if (options.headers instanceof Headers && !options.headers.has('X-Requested-With')) {
options.headers.append('X-Requested-With', 'XMLHttpRequest')
} else if (options.headers instanceof Object && !options.headers['X-Requested-With']) {
options.headers['X-Requested-With'] = 'XMLHttpRequest'
}
const response = await fetch(resource, options)
if (response.status === 401) {
checkLoginStatus()
}
return response
}
})(window.fetch)
}
|
