neil/silverbullet
1
0
Fork 0
Code

Remove authentication on manifest.json file (and favicon just in case)

Browse Source
This commit is contained in:
Zef Hemel 2022-12-15 12:59:31 +01:00
parent 1d3ae7c822
commit b6c0349203
1 changed files with 17 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
server/http_server.ts
View File

@ -178,20 +178,26 @@ export class HttpServer {
} }
private addPasswordAuth(app: Application) { private addPasswordAuth(app: Application) {
const excludedPaths = ["/manifest.json", "/favicon.png"];
if (this.user) { if (this.user) {
app.use(async ({ request, response }, next) => { app.use(async ({ request, response }, next) => {
if ( if (!excludedPaths.includes(request.url.pathname)) {
request.headers.get("Authorization") === if (
`Basic ${btoa(this.user!)}` request.headers.get("Authorization") ===
) { `Basic ${btoa(this.user!)}`
await next(); ) {
await next();
} else {
response.status = 401;
response.headers.set(
"WWW-Authenticate",
`Basic realm="Please enter your username and password"`,
);
response.body = "Unauthorized";
}
} else { } else {
response.status = 401; // Unauthenticated access to excluded paths
response.headers.set( await next();
"WWW-Authenticate",
`Basic realm="Please enter your username and password"`,
);
response.body = "Unauthorized";
} }
}); });
} }