misc: verify appServer

ringcentral · Dec 10, 2024 · f0d877c · f0d877c
1 parent c08e1a2
commit f0d877c
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/src/app.js b/src/app.js
@@ -22,10 +22,22 @@ const clientSecretFromParams = pathParams.clientSecret || pathParams.appSecret;
 const authProxy = pathParams.authProxy;
 const enableDiscovery = !!pathParams.discovery;
 const discoverAppServer = pathParams.discoverAppServer;
+
+function getAppServer() {
+  if (
+    pathParams.appServer &&
+    pathParams.appServer.indexOf('https://') === 0 &&
+    pathParams.appServer.indexOf('?') === -1 &&
+    pathParams.appServer.indexOf('javascript') === -1
+  ) {
+    return pathParams.appServer;
+  }
+  return defaultApiConfig.server;
+}
 const apiConfig = {
   clientId: clientIdFromParams || defaultApiConfig.appKey,
   clientSecret: (clientIdFromParams ? clientSecretFromParams : defaultApiConfig.appSecret),
-  server: pathParams.appServer || defaultApiConfig.server,
+  server: getAppServer(),
 };
 if (enableDiscovery) {
   apiConfig.enableDiscovery = enableDiscovery;