kuzzle 2.17.1 → 2.17.2

package/lib/api/funnel.js

@@ -896,6 +896,10 @@ class Funnel {
   _isOriginAuthorized (origin) {
     const httpConfig = global.kuzzle.config.http;
 
+    if (! origin) {
+      return true;
+    }
+
     if (global.kuzzle.config.internal.allowAllOrigins) {
       return true;
     }

package/lib/core/network/protocols/httpwsProtocol.js

@@ -258,6 +258,7 @@ class HttpWsProtocol extends Protocol {
     res.upgrade(
       {
         cookie: req.getHeader('cookie'),
+        origin: req.getHeader('origin'),
       },
       req.getHeader('sec-websocket-key'),
       req.getHeader('sec-websocket-protocol'),
@@ -268,7 +269,14 @@ class HttpWsProtocol extends Protocol {
 
   wsOnOpenHandler (socket) {
     const ip = Buffer.from(socket.getRemoteAddressAsText()).toString();
-    const connection = new ClientConnection(this.name, [ip], { cookie: socket.cookie });
+    const connection = new ClientConnection(
+      this.name,
+      [ip],
+      {
+        cookie: socket.cookie,
+        origin: socket.origin
+      }
+    );
 
     this.entryPoint.newConnection(connection);
     this.connectionBySocket.set(socket, connection);

package/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "kuzzle",
-  "version": "2.17.1",
+  "version": "2.17.2",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "kuzzle",
   "author": "The Kuzzle Team <support@kuzzle.io>",
-  "version": "2.17.1",
+  "version": "2.17.2",
   "description": "Kuzzle is an open-source solution that handles all the data management through a secured API, with a large choice of protocols.",
   "bin": {
     "kuzzle": "bin/start-kuzzle-server"