Skip to content

chore: Updating session utils file for server side handling #40024

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
trishaanand merged 1 commit into from
Apr 2, 2025
Merged

chore: Updating session utils file for server side handling #40024

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 21 additions & 4 deletions app/client/src/utils/SessionUtils.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,13 @@
import Api from "api/Api";
import type { ApiResponse } from "api/types";

// Constants for session-related URL parameters
export const SESSION_TOKEN_PARAM = "sessionToken";
export const ORIGINAL_SESSION_ID_PARAM = "originalSessionId";
export const DELETE_SESSION_PARAM = "deleteSession";
export const SESSION_TRANSFER_PHASE_PARAM = "sessionTransferPhase";
export const CSRF_TOKEN_PARAM = "csrfToken";
export const TRANSFER_PHASE_PARAM = "transferPhase";

/**
* Validates a session token from the URL and sets up the session.
Expand All @@ -12,26 +18,37 @@ export const SESSION_TOKEN_PARAM = "sessionToken";
export const validateSessionToken = async (): Promise<boolean> => {
try {
const urlParams = new URLSearchParams(window.location.search);
const sessionToken = urlParams.get("sessionToken");
const sessionToken = urlParams.get(SESSION_TOKEN_PARAM);

if (!sessionToken) {
return false;
}

// Create a copy of URL parameters to forward to the validation endpoint
const validationParams = new URLSearchParams(window.location.search);

const validationUrl = `v1/session/validate?${validationParams.toString()}`;

// Get the response from the API
const response = (await Api.get(
`v1/session/validate?sessionToken=${sessionToken}`,
validationUrl,
)) as unknown as ApiResponse<boolean>;

// Check if the request was successful
if (!response?.responseMeta?.success) {
return false;
}

// Remove the session token from the URL
// Remove the session token and related parameters from the URL
const url = new URL(window.location.href);

url.searchParams.delete("sessionToken");
url.searchParams.delete(SESSION_TOKEN_PARAM);
url.searchParams.delete(ORIGINAL_SESSION_ID_PARAM);
url.searchParams.delete(DELETE_SESSION_PARAM);
url.searchParams.delete(SESSION_TRANSFER_PHASE_PARAM);
url.searchParams.delete(CSRF_TOKEN_PARAM);
url.searchParams.delete(TRANSFER_PHASE_PARAM);

window.history.replaceState({}, "", url.toString());

// The data field contains the boolean result directly
Expand Down
Loading