hasura/graphql-engine
1
0
Fork 0
mirror of https://github.com/hasura/graphql-engine.git synced 2024-11-11 16:27:14 +03:00
Code Issues Projects Releases Wiki Activity

community: encourage good security in email checking (#1421)

Browse Source 
The current regex is vulnerable to all sorts of attacks: `foobar.com@gmail.com` or `jim@asdffoobar.com`.
This commit is contained in:
samuela 2019-01-24 10:36:49 -08:00 committed by Vamshi Surabhi
parent ae63ed9603
commit e7a42c6772
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
community/sample-apps/todo-auth0-jwt/README.md
View File

@ -21,7 +21,7 @@ function (user, context, callback) {
{
'x-hasura-default-role': 'user',
// do some custom logic to decide allowed roles
'x-hasura-allowed-roles': user.email.match(/foobar.com/) ? ['user', 'admin'] : ['user'],
'x-hasura-allowed-roles': user.email === 'admin@foobar.com' ? ['user', 'admin'] : ['user'],
'x-hasura-user-id': user.user_id
};
callback(null, user, context);