Merge pull request #1797 from nextcloud/artonge/fix/send_csrf_token_w…

…hen_fetching_updated_node Send CSRF token in rawStat
nextcloud · Jul 10, 2023 · 6f0f8f2 · 6f0f8f2
2 parents f707694 + 2016523
commit 6f0f8f2
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 4 deletions.
diff --git a/js/viewer-main.js b/js/viewer-main.js
diff --git a/js/viewer-main.js.map b/js/viewer-main.js.map
diff --git a/src/services/FileInfo.ts b/src/services/FileInfo.ts
@@ -23,6 +23,7 @@
 import { getClient } from './WebdavClient'
 import { genFileInfo, type FileInfo } from '../utils/fileUtils'
 import { createClient, type FileStat, type ResponseDataDetailed } from 'webdav'
+import { getRequestToken } from '@nextcloud/auth'
 
 const statData = `<?xml version="1.0"?>
 <d:propfind  xmlns:d="DAV:"
@@ -53,6 +54,8 @@ const statData = `<?xml version="1.0"?>
 
 /**
  * Retrieve the files list
+ * @param path
+ * @param options
  */
 export default async function(path: string, options = {}): Promise<FileInfo> {
 	const response = await getClient().stat(path, Object.assign({
@@ -64,9 +67,12 @@ export default async function(path: string, options = {}): Promise<FileInfo> {
 
 /**
  * Retrieve the files list
+ * @param origin
+ * @param path
+ * @param options
  */
 export async function rawStat(origin: string, path: string, options = {}) {
-	const response = await createClient(origin).stat(path, {
+	const response = await createClient(origin, { headers: { requesttoken: getRequestToken() || '' } }).stat(path, {
 		...options,
 		data: statData,
 		details: true,