TritonDataCenter#35 want ability to use "referer" header in RBAC rules

TritonDataCenter#34 using user-agent in RBAC rules can lead to 500 errors
arekinath · Jan 28, 2025 · 58aba2e · 58aba2e
1 parent 44d91e9
commit 58aba2e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/auth.js b/lib/auth.js
@@ -999,7 +999,8 @@ function gatherContext(req, res, next) {
     if (ip) {
         conditions.sourceip = ip.split(',')[0].trim();
     }
-    conditions['user-agent'] = req.headers['user-agent'];
+    conditions['referer'] = req.headers['referer'] || '';
+    conditions['user-agent'] = req.headers['user-agent'] || '';
     conditions.fromjob = false;
 
     // Override conditions with ones that are provided in the token