alois/Verso
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add ip_address and session_created to the session user object.

Browse Source
This commit is contained in:
Shane Kilkelly
2016-07-01 15:49:07 +01:00
parent f1653d01b7
commit 0ac9b05d02
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/web/app/coffee/Features/Authentication/AuthenticationController.coffee
+2
View File
@@ -133,6 +133,8 @@ module.exports = AuthenticationController =
isAdmin: user.isAdmin isAdmin: user.isAdmin
email: user.email email: user.email
referal_id: user.referal_id referal_id: user.referal_id
session_created: (new Date()).toISOString()
ip_address: req.ip
# Regenerate the session to get a new sessionID (cookie value) to # Regenerate the session to get a new sessionID (cookie value) to
# protect against session fixation attacks # protect against session fixation attacks
oldSession = req.session oldSession = req.session
services/web/test/UnitTests/coffee/Authentication/AuthenticationControllerTests.coffee
+4
View File
@@ -369,6 +369,7 @@ describe "AuthenticationController", ->
destroy : sinon.stub() destroy : sinon.stub()
@req.sessionStore = @req.sessionStore =
generate: sinon.stub() generate: sinon.stub()
@req.ip = "1.2.3.4"
@AuthenticationController.establishUserSession @req, @user, @callback @AuthenticationController.establishUserSession @req, @user, @callback
it "should set the session user to a basic version of the user", -> it "should set the session user to a basic version of the user", ->
@@ -378,6 +379,9 @@ describe "AuthenticationController", ->
@req.session.user.last_name.should.equal @user.last_name @req.session.user.last_name.should.equal @user.last_name
@req.session.user.referal_id.should.equal @user.referal_id @req.session.user.referal_id.should.equal @user.referal_id
@req.session.user.isAdmin.should.equal @user.isAdmin @req.session.user.isAdmin.should.equal @user.isAdmin
@req.session.user.ip_address.should.equal @req.ip
expect(typeof @req.session.user.ip_address).to.equal 'string'
expect(typeof @req.session.user.session_created).to.equal 'string'
it "should destroy the session", -> it "should destroy the session", ->
@req.session.destroy.called.should.equal true @req.session.destroy.called.should.equal true