Bypass cache authorization header

torchbox · Feb 3, 2021 · 8076cda · 8076cda
1 parent 22f36a2
commit 8076cda
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/common-caching.js b/common-caching.js
@@ -61,6 +61,9 @@ function requestIsCachable(request) {
   if (hasPrivateCookie(request)) {
     return false;
   }
+  if (hasAuthorizationHeader(request)) {
+    return false;
+  }
   return true;
 }
 
@@ -75,6 +78,10 @@ function hasPrivateCookie(request) {
   );
 }
 
+function hasAuthorizationHeader(request) {
+  return request.headers.has("Authorization")
+}
+
 function responseIsCachable(response) {
   if (!CACHABLE_HTTP_STATUS_CODES.includes(response.statusCode)) {
     return false;