v0.6.6: разделение — req.email(аудит) vs req.displayEmail(экран)
This commit is contained in:
@@ -9,7 +9,7 @@
|
||||
// ═══════════════════════════════════════════════════════════════════════════════
|
||||
|
||||
module.exports = {
|
||||
version: '0.6.5',
|
||||
version: '0.6.6',
|
||||
|
||||
// ── IAM ──────────────────────────────────────────────────────────────────
|
||||
iamUrl: process.env.V2_IAM_URL || 'https://auth-api.ngcloud.ru/api/v1/auth/user',
|
||||
|
||||
@@ -35,12 +35,13 @@ function enhanceImpersonation(req, res, next) {
|
||||
|
||||
// Подмена сессии — авто-имперсонация
|
||||
const allCids = [COMPANY, ...EXTRA];
|
||||
u.originalUserEmail = ORIGINAL; // кто реально вошёл
|
||||
u.originalUserEmail = ORIGINAL; // кто реально вошёл (KC)
|
||||
u.email = TARGET; // в кого имперсонируем
|
||||
u.clientId = COMPANY;
|
||||
u.activeClientId = COMPANY;
|
||||
u.allClientIds = allCids;
|
||||
u.isImpersonated = true;
|
||||
u.impersonatedCompanyId = COMPANY; // для resolveContext
|
||||
u.companyName = COMPANY;
|
||||
u.profiles = allCids.map(cid => ({ client_id: cid, company_name: cid }));
|
||||
|
||||
|
||||
@@ -36,9 +36,12 @@ function resolveContext(req, res, next) {
|
||||
// u.originalUserEmail — реальный админ
|
||||
// u.impersonatedCompanyId — W-номер компании
|
||||
const ADMIN_EMAIL = process.env.ADMIN_EMAIL || '';
|
||||
const isImpersonated = !!(u.originalUserEmail && u.impersonatedCompanyId);
|
||||
const isImpersonated = !!(u.originalUserEmail && u.impersonatedCompanyId) || u.isImpersonated;
|
||||
|
||||
// req.email — для АУДИТА (реальный юзер при имперсонации)
|
||||
req.email = isImpersonated ? u.originalUserEmail : (u.email || '');
|
||||
// req.displayEmail — для ПОКАЗА на экране (текущий, может быть имперсонированным)
|
||||
req.displayEmail = u.email || '';
|
||||
req.clientId = isImpersonated ? u.impersonatedCompanyId : (u.activeClientId || u.clientId || '');
|
||||
req.companyName = u.companyName || req.clientId;
|
||||
req.isAdmin = !!(u.isAdmin && u.adminMode) || (ADMIN_EMAIL && u.email === ADMIN_EMAIL);
|
||||
|
||||
@@ -43,6 +43,7 @@ function createUserRouter() {
|
||||
originalUserEmail: req.impersonatedBy ? req.email : null,
|
||||
email: req.email || (req.user && req.user.email) || (req.session && req.session.user && req.session.user.email) || '',
|
||||
loginEmail: (req.session && req.session.user && (req.session.user.originalUserEmail || req.session.user.email)) || req.email || '',
|
||||
displayEmail: req.displayEmail || req.email || '',
|
||||
});
|
||||
} catch (e) {
|
||||
res.status(500).send('<h2>Ошибка</h2><pre>' + e.message + '</pre><a href="/app">Назад</a>');
|
||||
|
||||
Reference in New Issue
Block a user