Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-10 23:36:14 -05:00
Code Issues Activity

Improved error messages for failed authorization

Browse source
This commit is contained in:
Kevin Ansfield 2019-02-21 13:19:57 +07:00
parent 03d4843628
commit 288a38036b
2 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
core/server/services/auth/authorize.js
View file

@ -52,7 +52,8 @@ const authorize = {
return next(); return next();
} }
return next(new common.errors.NoPermissionError({ return next(new common.errors.NoPermissionError({
message: common.i18n.t('errors.middleware.auth.pleaseSignInOrAuthenticate') message: common.i18n.t('errors.middleware.auth.authorizationFailed'),
context: common.i18n.t('errors.middleware.auth.missingContentMemberOrIntegration')
})); }));
}, },
@ -70,7 +71,8 @@ const authorize = {
return next(); return next();
} else { } else {
return next(new common.errors.NoPermissionError({ return next(new common.errors.NoPermissionError({
message: common.i18n.t('errors.middleware.auth.pleaseSignInOrAuthenticate') message: common.i18n.t('errors.middleware.auth.authorizationFailed'),
context: common.i18n.t('errors.middleware.auth.missingAdminUserOrIntegration')
})); }));
} }
} }

4
core/server/translations/en.json
View file

@ -78,7 +78,9 @@
"missingUserIDForSession": "Cannot create session without user id.", "missingUserIDForSession": "Cannot create session without user id.",
"accessDenied": "Access denied.", "accessDenied": "Access denied.",
"pleaseSignIn": "Please Sign In", "pleaseSignIn": "Please Sign In",
"pleaseSignInOrAuthenticate": "Please sign in or authenticate with an API Key", "authorizationFailed": "Authorization failed",
"missingContentMemberOrIntegration": "Unable to determine the authenticated member or integration. Check the supplied Content API Key and ensure cookies are being passed through if member auth is failing.",
"missingAdminUserOrIntegration": "Unable to determine the authenticated user or integration. Check that cookies are being passed through if using session authentication.",
"adminApiKeyMissing": "Admin API Key missing.", "adminApiKeyMissing": "Admin API Key missing.",
"unknownAdminApiKey": "Unknown Admin API Key", "unknownAdminApiKey": "Unknown Admin API Key",
"unknownContentApiKey": "Unknown Content API Key", "unknownContentApiKey": "Unknown Content API Key",