Skip to content

Fixes sessionTokens being overridden in 'find' #4332

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
126 changes: 126 additions & 0 deletions spec/ParseSession.spec.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,126 @@
//
// Tests behavior of Parse Sessions
//

"use strict";

function setupTestUsers() {
const user1 = new Parse.User();
const user2 = new Parse.User();
const user3 = new Parse.User();

user1.set("username", "testuser_1");
user2.set("username", "testuser_2");
user3.set("username", "testuser_3");

user1.set("password", "password");
user2.set("password", "password");
user3.set("password", "password");

return user1.signUp().then(() => {
return user2.signUp();
}).then(() => {
return user3.signUp();
})
}

describe('Parse.Session', () => {

// multiple sessions with masterKey + sessionToken
it('should retain original sessionTokens with masterKey & sessionToken set', (done) => {
setupTestUsers().then((user) => {
const query = new Parse.Query(Parse.Session);
return query.find({
useMasterKey: true,
sessionToken: user.get('sessionToken')
});
}).then((results) => {
const foundKeys = [];
expect(results.length).toBe(3);
for(const key in results) {
const sessionToken = results[key].get('sessionToken');
if(foundKeys[sessionToken]) {
fail('Duplicate session token present in response');
break;
}
foundKeys[sessionToken] = 1;
}
done();
}).catch((err) => {
fail(err);
});
});

// single session returned, with just one sessionToken
it('should retain original sessionTokens with just sessionToken set', (done) => {
let knownSessionToken;
setupTestUsers().then((user) => {
knownSessionToken = user.get('sessionToken');
const query = new Parse.Query(Parse.Session);
return query.find({
sessionToken: knownSessionToken
});
}).then((results) => {
expect(results.length).toBe(1);
const sessionToken = results[0].get('sessionToken');
expect(sessionToken).toBe(knownSessionToken);
done();
}).catch((err) => {
fail(err);
});
});

// multiple users with masterKey + sessionToken
it('token on users should retain original sessionTokens with masterKey & sessionToken set', (done) => {
setupTestUsers().then((user) => {
const query = new Parse.Query(Parse.User);
return query.find({
useMasterKey: true,
sessionToken: user.get('sessionToken')
});
}).then((results) => {
const foundKeys = [];
expect(results.length).toBe(3);
for(const key in results) {
const sessionToken = results[key].get('sessionToken');
if(foundKeys[sessionToken] && sessionToken !== undefined) {
fail('Duplicate session token present in response');
break;
}
foundKeys[sessionToken] = 1;
}
done();
}).catch((err) => {
fail(err);
});
});

// multiple users with just sessionToken
it('token on users should retain original sessionTokens with just sessionToken set', (done) => {
let knownSessionToken;
setupTestUsers().then((user) => {
knownSessionToken = user.get('sessionToken');
const query = new Parse.Query(Parse.User);
return query.find({
sessionToken: knownSessionToken
});
}).then((results) => {
const foundKeys = [];
expect(results.length).toBe(3);
for(const key in results) {
const sessionToken = results[key].get('sessionToken');
if(foundKeys[sessionToken] && sessionToken !== undefined) {
fail('Duplicate session token present in response');
break;
}
foundKeys[sessionToken] = 1;
}


done();
}).catch((err) => {
fail(err);
});
});

});
7 changes: 0 additions & 7 deletions src/Routers/ClassesRouter.js
Original file line number Diff line number Diff line change
Expand Up @@ -27,13 +27,6 @@ export class ClassesRouter extends PromiseRouter {
}
return rest.find(req.config, req.auth, this.className(req), body.where, options, req.info.clientSDK)
.then((response) => {
if (response && response.results) {
for (const result of response.results) {
if (result.sessionToken) {
result.sessionToken = req.info.sessionToken || result.sessionToken;
}
}
}
return { response: response };
});
}
Expand Down