requires empty username/password if set disableAuth for basic auth

This commit is contained in:
LouisLam
2021-08-03 00:08:46 +08:00
parent 6f868c9ec3
commit 44c8ca9da8
2 changed files with 17 additions and 3 deletions

View File

@@ -1,6 +1,8 @@
const basicAuth = require("express-basic-auth")
const passwordHash = require("./password-hash");
const { R } = require("redbean-node");
const { setting } = require("./util-server");
const { debug } = require("../src/util");
/**
*
@@ -28,9 +30,18 @@ exports.login = async function (username, password) {
}
function myAuthorizer(username, password, callback) {
exports.login(username, password).then((user) => {
callback(null, user != null)
setting("disableAuth").then((result) => {
if (result) {
callback(null, true)
} else {
exports.login(username, password).then((user) => {
callback(null, user != null)
})
}
})
}
exports.basicAuth = basicAuth({