neil/silverbullet
1
0
Fork 0
Code

Remove authentication on manifest.json file (and favicon just in case)

Browse Source
This commit is contained in:
Zef Hemel 2022-12-15 12:59:31 +01:00
parent 1d3ae7c822
commit b6c0349203
1 changed files with 17 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
server/http_server.ts
View File

@ -178,20 +178,26 @@ export class HttpServer {
}
private addPasswordAuth(app: Application) {
const excludedPaths = ["/manifest.json", "/favicon.png"];
if (this.user) {
app.use(async ({ request, response }, next) => {
if (
request.headers.get("Authorization") ===
`Basic ${btoa(this.user!)}`
) {
await next();
if (!excludedPaths.includes(request.url.pathname)) {
if (
request.headers.get("Authorization") ===
`Basic ${btoa(this.user!)}`
) {
await next();
} else {
response.status = 401;
response.headers.set(
"WWW-Authenticate",
`Basic realm="Please enter your username and password"`,
);
response.body = "Unauthorized";
}
} else {
response.status = 401;
response.headers.set(
"WWW-Authenticate",
`Basic realm="Please enter your username and password"`,
);
response.body = "Unauthorized";
// Unauthenticated access to excluded paths
await next();
}
});
}