Pass on artifacts in injected auth filter bypassing too

anneveling · anneveling · commit 75a8e6dfc20f · 2015-05-28T11:34:23.000+02:00
diff --git a/lib/auth.js b/lib/auth.js
@@ -320,7 +320,7 @@ internals.Auth.prototype._authenticate = function (request, next) {
     // Injection bypass
 
     if (request.auth.credentials) {
-        return validate(null, 'bypass', { credentials: request.auth.credentials });
+        return validate(null, 'bypass', { credentials: request.auth.credentials, artifacts: request.auth.artifacts });
     }
 
     // Authenticate
diff --git a/test/auth.js b/test/auth.js
@@ -881,6 +881,39 @@ describe('authentication', function () {
                 done();
             });
         });
+
+        it('passes the options.artifacts object, even with an auth filter', function (done) {
+
+            var server = new Hapi.Server();
+            server.connection();
+            server.auth.scheme('custom', internals.implementation);
+            server.auth.strategy('default', 'custom', true, { users: { steve: {} } });
+            server.route({
+                method: 'GET',
+                path: '/',
+                config: {
+                    handler: function (request, reply) { return reply(request.auth.artifacts); },
+                    auth: 'default'
+                }
+            });
+
+            var options = {
+                url: '/',
+                headers: { authorization: 'Custom steve' },
+                credentials: { foo: 'bar' },
+                artifacts: { bar: 'baz' }
+            };
+
+            server.inject(options, function (res) {
+                expect(res.statusCode).to.equal(200);
+                expect(res.result.bar).to.equal('baz');
+                done();
+            });
+
+
+
+        });
+
     });
 
     describe('payload()', function () {

Original file line number	Diff line number	Diff line change
`@@ -320,7 +320,7 @@ internals.Auth.prototype._authenticate = function (request, next) {`
`320`	`320`	`// Injection bypass`
`321`	`321`
`322`	`322`	`if (request.auth.credentials) {`
`323`		`- return validate(null, 'bypass', { credentials: request.auth.credentials });`
	`323`	`+ return validate(null, 'bypass', { credentials: request.auth.credentials, artifacts: request.auth.artifacts });`
`324`	`324`	`}`
`325`	`325`
`326`	`326`	`// Authenticate`