mirror of
https://github.com/zulip/zulip.git
synced 2025-11-06 23:13:25 +00:00
ced6921491
Fixes #396. We could display an error message, but jumping right to the login page seems smoother and conveys the same information. This will discard any message being composed, but preserving it would have security consequences that we should consider further before implementing that. Hopefully, users only get logged out by an explicit action, so they can't complain too much (but see #217). (imported from commit aaa23ecf46c73e514117ae1010fc44e133f2ba07)
46 lines
1.6 KiB
JavaScript
46 lines
1.6 KiB
JavaScript
// Miscellaneous early setup.
|
|
// This is the first of our Javascript files to be included.
|
|
|
|
var loading_spinner;
|
|
var templates = {};
|
|
var csrf_token;
|
|
$(function () {
|
|
// Display loading indicator. This disappears after the first
|
|
// get_updates completes.
|
|
if (have_initial_messages) {
|
|
loading_spinner = new Spinner().spin($('#loading_spinner')[0]);
|
|
} else {
|
|
$('#loading_indicator').hide();
|
|
}
|
|
|
|
// Compile Handlebars templates.
|
|
$.each(['message', 'subscription', 'narrowbar',
|
|
'userinfo_popover_title', 'userinfo_popover_content'],
|
|
function (index, name) {
|
|
templates[name] = Handlebars.compile($('#template_'+name).html());
|
|
}
|
|
);
|
|
|
|
// This requires that we used Django's {% csrf_token %} somewhere on the page.
|
|
csrf_token = $('input[name="csrfmiddlewaretoken"]').attr('value');
|
|
|
|
$.ajaxSetup({
|
|
beforeSend: function (xhr, settings) {
|
|
if (!(/^http:.*/.test(settings.url) || /^https:.*/.test(settings.url))) {
|
|
// Only send the token to relative URLs i.e. locally.
|
|
xhr.setRequestHeader("X-CSRFToken", csrf_token);
|
|
}
|
|
}
|
|
});
|
|
|
|
// For some reason, jQuery wants this to be attached to an element.
|
|
$('body').ajaxError(function (event, xhr) {
|
|
if (xhr.status === 401) {
|
|
// We got logged out somehow, perhaps from another window or a session timeout.
|
|
// We could display an error message, but jumping right to the login page seems
|
|
// smoother and conveys the same information.
|
|
window.location.replace('/accounts/login');
|
|
}
|
|
});
|
|
});
|