fixed bug in authentication of download file by name

fadeoutsoftware · Sep 15, 2020 · 1df7066 · 1df7066
1 parent 2cc51ec
commit 1df7066
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/wasdiwebserver/src/main/java/it/fadeout/rest/resources/CatalogResources.java b/wasdiwebserver/src/main/java/it/fadeout/rest/resources/CatalogResources.java
@@ -185,8 +185,13 @@ public Response downloadEntryByName(@HeaderParam("x-session-token") String sSess
 		Utils.debugLog("CatalogResources.DownloadEntryByName( Session: " + sSessionId + ", TokenSession: "+ sTokenSessionId + ", FileName: " + sFileName + ", Ws: " + sWorkspace);
 
 		try {
+
+			if (Utils.isNullOrEmpty(sSessionId)) sSessionId = sTokenSessionId;
+
+
+			Utils.debugLog("CatalogResources.DownloadEntryByName: call get user from session: " + sSessionId);
 
-			User oUser = Wasdi.getUserFromSession(sTokenSessionId);
+			User oUser = Wasdi.getUserFromSession(sSessionId);
 
 			if (oUser == null) {
 				Utils.debugLog("CatalogResources.DownloadEntryByName: user not authorized");