strongloop / loopback / 5620 / 2

88%

master: 90%

push

travis-ci

Fix user-literal rewrite for anonymous requests

Currently any `currentUserLiteral` routes when accessed with a bad
token throw a 500 due to a SQL error that is raised because
`Model.findById` is invoked with `id={currentUserLiteral}`
(`id=me` in our case) when the url rewrite fails.

This commit changes the token middleware to return 401 Not Authorized
when the client is requesting a currentUserLiteral route without
a valid access token.

1556 of 2015 branches covered (77.22%)

2936 of 3347 relevant lines covered (87.72%)

1707.13 hits per line