add todo for x-access-header handling

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
owncloud · Jul 19, 2021 · 030af7b · 030af7b
1 parent e4a23b4
commit 030af7b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/proxy/pkg/middleware/account_resolver.go b/proxy/pkg/middleware/account_resolver.go
@@ -50,6 +50,7 @@ func (m accountResolver) ServeHTTP(w http.ResponseWriter, req *http.Request) {
 	ctx := req.Context()
 	claims := oidc.FromContext(ctx)
 	u, ok := revauser.ContextGetUser(ctx)
+	// TODO what if an X-Access-Token is set? happens eg for download requests to the /data endpoint in the reva frontend
 
 	if claims == nil && !ok {
 		m.next.ServeHTTP(w, req)