Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-01-02 22:00:34 +01:00
Code Issues Packages Projects Releases Wiki Activity

closes #3608

Browse Source 
inb4 all admin routes are publically visible
This commit is contained in:
psychobunny
2015-09-14 15:29:26 -04:00
parent ed358f4bf7
commit b660eec67f
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/routes/index.js
View File

@@ -100,7 +100,8 @@ module.exports = function(app, middleware) {
var router = express.Router(),
pluginRouter = express.Router(),
authRouter = express.Router(),
relativePath = nconf.get('relative_path');
relativePath = nconf.get('relative_path'),
ensureLoggedIn = require('connect-ensure-login');
pluginRouter.render = function() {
app.render.apply(app, arguments);
@@ -112,11 +113,9 @@ module.exports = function(app, middleware) {
app.use(middleware.maintenanceMode);
app.all(relativePath + '/api/?*', middleware.prepareAPI);
app.all(relativePath + '/api/admin/?*', middleware.isAdmin);
var ensureLoggedIn = require('connect-ensure-login');
app.all(relativePath + '/admin/?*', ensureLoggedIn.ensureLoggedIn(nconf.get('relative_path') + '/login?local=1'), middleware.applyCSRF, middleware.isAdmin);
app.all(relativePath + '(/api|/api/*?)', middleware.prepareAPI);
app.all(relativePath + '(/api/admin|/api/admin/*?)', middleware.isAdmin);
app.all(relativePath + '(/admin|/admin/*?)', ensureLoggedIn.ensureLoggedIn(nconf.get('relative_path') + '/login?local=1'), middleware.applyCSRF, middleware.isAdmin);
adminRoutes(router, middleware, controllers);
metaRoutes(router, middleware, controllers);