put cookie requests back on authenticated rpc list

2017-06-02 11:45:07 +02:00
parent 6db5b4b559
commit f6e443aeb2
1 changed files with 4 additions and 1 deletions
--- a/rpc.js
+++ b/rpc.js
@@ -798,7 +798,7 @@ var upload_status = function (Env, publicKey, filesize, cb) {

 var isAuthenticatedCall = function (call) {
    return [
-        //'COOKIE',
+        'COOKIE',
        'RESET',
        'PIN',
        'UNPIN',
@@ -893,6 +893,9 @@ RPC.create = function (config /*:typeof(ConfigType)*/, cb /*:(?Error, ?Function)
            public key which you provided.

            We can safely modify the state for that key
+
+            OR it's an unauthenticated call, which must not modify the state
+            for that key in a meaningful way.
        */

        // discard validated cookie from message