52 lines
1.3 KiB
JavaScript
52 lines
1.3 KiB
JavaScript
/**
|
|
* Default 403 (Forbidden) middleware
|
|
*
|
|
* This middleware can be invoked from a controller or policy:
|
|
* res.forbidden( [message] )
|
|
*
|
|
*
|
|
* @param {String|Object|Array} message
|
|
* optional message to inject into view locals or JSON response
|
|
*
|
|
*/
|
|
|
|
module.exports[403] = function badRequest(message, req, res) {
|
|
|
|
/*
|
|
* NOTE: This function is Sails middleware-- that means that not only do `req` and `res`
|
|
* work just like their Express equivalents to handle HTTP requests, they also simulate
|
|
* the same interface for receiving socket messages.
|
|
*/
|
|
|
|
var viewFilePath = '403';
|
|
var statusCode = 403;
|
|
|
|
var result = {
|
|
status: statusCode
|
|
};
|
|
|
|
// Optional message
|
|
if (message) {
|
|
result.message = message;
|
|
}
|
|
|
|
// If the user-agent wants a JSON response, send json
|
|
if (req.wantsJSON) {
|
|
return res.json(result, result.status);
|
|
}
|
|
|
|
// Set status code and view locals
|
|
res.status(result.status);
|
|
for (var key in result) {
|
|
res.locals[key] = result[key];
|
|
}
|
|
// And render view
|
|
res.render(viewFilePath, result, function (err) {
|
|
// If the view doesn't exist, or an error occured, send json
|
|
if (err) { return res.json(result, result.status); }
|
|
|
|
// Otherwise, serve the `views/403.*` page
|
|
res.render(viewFilePath);
|
|
});
|
|
|
|
}; |