Merge pull request #4854 from Countly/SER-1096

[SER-1096] Checksum not working for form data

Author: kanwarujjaval

api/api.js

@@ -348,6 +348,12 @@ plugins.connectToAllDatabases().then(function() {
                     req.body += data;
                 });
 
+                let multiFormData = false;
+                // Check if we have 'multipart/form-data'
+                if (req.headers['content-type']?.startsWith('multipart/form-data')) {
+                    multiFormData = true;
+                }
+
                 form.parse(req, (err, fields, files) => {
                     //handle bakcwards compatability with formiddble v1
                     for (let i in files) {
@@ -362,8 +368,18 @@ plugins.connectToAllDatabases().then(function() {
                         }
                     }
                     params.files = files;
-                    for (const i in fields) {
-                        params.qstring[i] = fields[i];
+                    if (multiFormData) {
+                        let formDataUrl = [];
+                        for (const i in fields) {
+                            params.qstring[i] = fields[i];
+                            formDataUrl.push(`${i}=${fields[i]}`);
+                        }
+                        params.formDataUrl = formDataUrl.join('&');
+                    }
+                    else {
+                        for (const i in fields) {
+                            params.qstring[i] = fields[i];
+                        }
                     }
                     if (!params.apiPath) {
                         processRequest(params);

api/utils/requestProcessor.js

@@ -3098,7 +3098,13 @@ const checksumSaltVerification = (params) => {
         payloads.push(params.href.substr(params.fullPath.length + 1));
 
         if (params.req.method.toLowerCase() === 'post') {
-            payloads.push(params.req.body);
+            // Check if we have 'multipart/form-data'
+            if (params.formDataUrl) {
+                payloads.push(params.formDataUrl);
+            }
+            else {
+                payloads.push(params.req.body);
+            }
         }
         if (typeof params.qstring.checksum !== "undefined") {
             for (let i = 0; i < payloads.length; i++) {