From cc55bfb7ba3d5ab768f58acda31815c9ebf381ef Mon Sep 17 00:00:00 2001 From: Florent Vilmart Date: Thu, 18 Feb 2016 10:54:53 -0500 Subject: [PATCH] Fix missing session token when fetching a _User --- src/Routers/ClassesRouter.js | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/src/Routers/ClassesRouter.js b/src/Routers/ClassesRouter.js index c9fe9c4834..95a27ef1e2 100644 --- a/src/Routers/ClassesRouter.js +++ b/src/Routers/ClassesRouter.js @@ -54,10 +54,17 @@ export class ClassesRouter { throw new Parse.Error(Parse.Error.OBJECT_NOT_FOUND, 'Object not found.'); } - if(req.params.className === "_User"){ + if (req.params.className === "_User") { + delete response.results[0].sessionToken; - } - + + const user = response.results[0]; + + if (req.auth.user && user.objectId == req.auth.user.id) { + // Force the session token + response.results[0].sessionToken = req.info.sessionToken; + } + } return { response: response.results[0] }; }); }