allow disabling authentication for server version, closes #1132

This commit is contained in:
zadam
2020-08-29 00:11:50 +02:00
parent 2823bf3488
commit 7fb22d41a0
3 changed files with 13 additions and 4 deletions

View File

@@ -6,12 +6,15 @@ const sqlInit = require('./sql_init');
const utils = require('./utils');
const passwordEncryptionService = require('./password_encryption');
const optionService = require('./options');
const config = require('./config');
const noAuthentication = config.General && config.General.noAuthentication === true;
function checkAuth(req, res, next) {
if (!sqlInit.isDbInitialized()) {
res.redirect("setup");
}
else if (!req.session.loggedIn && !utils.isElectron()) {
else if (!req.session.loggedIn && !utils.isElectron() && !noAuthentication) {
res.redirect("login");
}
else {
@@ -22,7 +25,7 @@ function checkAuth(req, res, next) {
// for electron things which need network stuff
// currently we're doing that for file upload because handling form data seems to be difficult
function checkApiAuthOrElectron(req, res, next) {
if (!req.session.loggedIn && !utils.isElectron()) {
if (!req.session.loggedIn && !utils.isElectron() && !noAuthentication) {
reject(req, res, "Not authorized");
}
else {
@@ -31,7 +34,7 @@ function checkApiAuthOrElectron(req, res, next) {
}
function checkApiAuth(req, res, next) {
if (!req.session.loggedIn) {
if (!req.session.loggedIn && !noAuthentication) {
reject(req, res, "Not authorized");
}
else {