hapi-auth-bearer-mw - npm Package Compare versions

Comparing version 1.1.1 to 1.2.1

lib/index.js

@@ -34,3 +34,3 @@ (function() {
       var _ref, _ref1;
-      return (_ref = internals.identityStore) != null ? (_ref1 = _ref.methods) != null ? _ref1.users : void 0 : void 0;
+      return (_ref = internals.hapiUserStoreMultiTenant) != null ? (_ref1 = _ref.methods) != null ? _ref1.users : void 0 : void 0;
     };
@@ -102,15 +102,19 @@ Hoek.assert(_.isFunction(internals.oauthAuth, "No oauth auth accessible."));
       authenticate: function(request, reply) {
-        var authorization, createCallback, parts, req;
+        var accessToken, authorization, createCallback, parts, req;
         req = request.raw.req;
-        authorization = req.headers.authorization;
-        if (!authorization) {
-          return reply(boom.unauthorized(null, "Bearer"));
+        accessToken = request.query['access_token'];
+        if (!accessToken) {
+          authorization = req.headers.authorization;
+          if (!authorization) {
+            return reply(boom.unauthorized(null, "Bearer"));
+          }
+          parts = authorization.split(/\s+/);
+          if (parts.length !== 2) {
+            return reply(boom.badRequest("Bad HTTP authentication header format"));
+          }
+          if (parts[0] && parts[0].toLowerCase() !== "bearer") {
+            return reply(boom.unauthorized(null, "Bearer"));
+          }
+          accessToken = parts[1];
         }
-        parts = authorization.split(/\s+/);
-        if (parts.length !== 2) {
-          return reply(boom.badRequest("Bad HTTP authentication header format"));
-        }
-        if (parts[0] && parts[0].toLowerCase() !== "bearer") {
-          return reply(boom.unauthorized(null, "Bearer"));
-        }
         createCallback = function(token) {
@@ -137,3 +141,3 @@ return function(err, credentials) {
         };
-        return internals.validateFunc(parts[1], createCallback(parts[1]));
+        return internals.validateFunc(accessToken, createCallback(accessToken));
       }
@@ -140,0 +144,0 @@ };

package.json

 {
   "name": "hapi-auth-bearer-mw",
-  "version": "1.1.1",
+  "version": "1.2.1",
   "private": false,
@@ -5,0 +5,0 @@ "main": "lib/index.js",

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

397050

increased by0.08%

Lines of code

10906

increased by0.04%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes