Function handleParseSession

src/middlewares.js:332–368

(req, res, next)

};

export const handleParseSession = async (req, res, next) => {
  try {
    const info = req.info;
    if (req.auth || (req.url === '/sessions/me' && req.method === 'GET')) {
      next();
      return;
    }
    let requestAuth = null;
    if (
      info.sessionToken &&
      req.url === '/upgradeToRevocableSession' &&
      info.sessionToken.indexOf('r:') != 0
    ) {
      requestAuth = await auth.getAuthForLegacySessionToken({
        config: req.config,
        installationId: info.installationId,
        sessionToken: info.sessionToken,
      });
    } else {
      requestAuth = await auth.getAuthForSessionToken({
        config: req.config,
        installationId: info.installationId,
        sessionToken: info.sessionToken,
      });
    }
    req.auth = requestAuth;
    next();
  } catch (error) {
    if (error instanceof Parse.Error) {
      next(error);
      return;
    }
    // Log full error details internally, but don't expose to client
    req.config.loggerController.error('error getting auth for sessionToken', error);
    next(new Parse.Error(Parse.Error.UNKNOWN_ERROR, 'Unknown error'));
  }
};

function getClientIp(req) {
  return req.ip;