Use cookie in request if present

opencollective · Nov 27, 2024 · 994d54c · 994d54c
1 parent 91f5b4f
commit 994d54c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/middleware/authentication.js b/server/middleware/authentication.js
@@ -15,7 +15,7 @@ import RateLimit from '../lib/rate-limit';
 import { clearRedirectCookie, setRedirectCookie } from '../lib/redirect-cookie';
 import { reportMessageToSentry } from '../lib/sentry';
 import { TWITTER_SCOPES } from '../lib/twitter';
-import { getBearerTokenFromRequestHeaders, parseToBoolean } from '../lib/utils';
+import { getBearerTokenFromCookie, getBearerTokenFromRequestHeaders, parseToBoolean } from '../lib/utils';
 import models from '../models';
 import paymentProviders from '../paymentProviders';
 
@@ -47,7 +47,7 @@ const debug = debugLib('auth');
 const parseJwt = req => {
   let token = req.params.access_token || req.query.access_token || req.body.access_token;
   if (!token) {
-    token = getBearerTokenFromRequestHeaders(req);
+    token = getBearerTokenFromRequestHeaders(req) || getBearerTokenFromCookie(req);
   }
 
   if (token) {