Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

check session

Browse Source
This commit is contained in:
Hemachandar
2026-03-24 17:50:19 +05:30
parent 90b9dc134d
commit 5ea93d2612
1 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/general.php
+22 -4
View File
@@ -382,17 +382,35 @@ function router(Http $utopia, Database $dbForPlatform, callable $getProjectDB, S
// isExecutionAllowed remains false
}
$userExists = false;
$userId = $payload['userId'] ?? '';
if (!empty($userId)) {
/** @var \Appwrite\Utopia\Database\Documents\User */
$user = $authorization->skip(fn () => $dbForProject->getDocument('users', $userId));
if (!$user->isEmpty() && $user->getAttribute('status', false)) {
foreach ($user->getRoles($authorization) as $role) {
$authorization->addRole($role);
}
$isExecutionAllowed = $authorization->isValid(new Input('execute', $permissions));
$userExists = true;
}
}
$sessionExists = false;
$jwtSessionId = $payload['sessionId'] ?? '';
if (!empty($jwtSessionId) && isset($user)) {
$sessionExists = !empty($user->find('$id', $jwtSessionId, 'sessions'));
}
$membershipExists = false;
$project = $authorization->skip(fn () => $dbForPlatform->getDocument('projects', $projectId));
if (!$project->isEmpty() && isset($user)) {
$teamId = $project->getAttribute('teamId', '');
$membershipExists = !empty($user->find('teamId', $teamId, 'memberships'));
}
if ($userExists && $sessionExists && $membershipExists) {
foreach ($user->getRoles($authorization) as $role) {
$authorization->addRole((string) $role);
}
$isExecutionAllowed = $authorization->isValid(new Input('execute', $permissions));
}
}
if (!$isExecutionAllowed) {