@openneuro/server 4.44.0 → 4.44.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openneuro/server",
-  "version": "4.44.0",
+  "version": "4.44.2",
   "description": "Core service for the OpenNeuro platform.",
   "license": "MIT",
   "main": "src/server.js",
@@ -21,7 +21,7 @@
     "@elastic/elasticsearch": "8.13.1",
     "@graphql-tools/schema": "^10.0.0",
     "@keyv/redis": "^4.5.0",
-    "@openneuro/search": "^4.44.0",
+    "@openneuro/search": "^4.44.2",
     "@sentry/node": "^8.25.0",
     "@sentry/profiling-node": "^8.25.0",
     "base64url": "^3.0.0",
@@ -89,5 +89,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "52d24b2d23085dbec677cd7f36c2bcd70882ba91"
+  "gitHead": "2df85aec35b3122c2be65627745569b914c56380"
 }

package/src/libs/authentication/jwt.ts

@@ -1,6 +1,7 @@
 import passport from "passport"
 import refresh from "passport-oauth2-refresh"
 import jwt from "jsonwebtoken"
+import * as Sentry from "@sentry/node"
 import { decrypt } from "./crypto"
 import User from "../../models/user"
 import config from "../../config"
@@ -187,7 +188,18 @@ export const authenticate = (req, res, next) => {
       }
     }
     passport.authenticate("jwt", { session: false }, (err, user) => {
-      req.login(user, { session: false }, () => next())
+      req.login(user, { session: false }, () => {
+        if (user) {
+          Sentry.setUser({
+            id: user.id,
+            ip_address: req.headers["x-forwarded-for"] as string,
+          })
+        }
+        Sentry.setContext("request_headers", {
+          "x-forwarded-for": req.headers["x-forwarded-for"],
+        })
+        next()
+      })
     })(req, res, next)
   }
   authenticateAsync()

package/src/sentry.ts

@@ -25,4 +25,5 @@ Sentry.init({
     "You do not have access to read this dataset.",
     "You do not have access to modify this dataset.",
   ],
+  sendDefaultPii: true,
 })