From b2ce335eec1128288bf1a03a3f5f718dcb9cd906 Mon Sep 17 00:00:00 2001 From: heath corbin Date: Sat, 24 Mar 2018 01:14:06 -0500 Subject: [PATCH] Added solution to issue with query string parameters breaking the acl check --- src/simple-express-acl.js | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/src/simple-express-acl.js b/src/simple-express-acl.js index e542632..288a4c9 100644 --- a/src/simple-express-acl.js +++ b/src/simple-express-acl.js @@ -71,12 +71,15 @@ class ACL { } makeResource(req) { - if (!acl.prefix) { - return (_.toLower( _.trim(req.baseUrl, '/') )) || '/' - } else { - let _baseUrl = (_.toLower( _.trim(req.baseUrl, '/') )) || '/' - return _.trimStart(_baseUrl, acl.prefix) + var _baseUrl = _lodash2.default.toLower(_lodash2.default.trim(req.path, '/')) || '/'; + + _baseUrl = acl.prefix ? _lodash2.default.trimStart(_baseUrl, acl.prefix) : _baseUrl; + + if(_baseUrl.indexOf('/') !== -1) { + _baseUrl = _baseUrl.split('/')[0]; } + + return _baseUrl; } roleAccess(resource, method) {