requires empty username/password if set disableAuth for basic auth

This commit is contained in:
LouisLam 2021-08-03 00:08:46 +08:00
parent 6f868c9ec3
commit 44c8ca9da8
2 changed files with 17 additions and 3 deletions

View file

@ -1,6 +1,8 @@
const basicAuth = require("express-basic-auth")
const passwordHash = require("./password-hash");
const { R } = require("redbean-node");
const { setting } = require("./util-server");
const { debug } = require("../src/util");
/**
*
@ -28,9 +30,18 @@ exports.login = async function (username, password) {
}
function myAuthorizer(username, password, callback) {
exports.login(username, password).then((user) => {
callback(null, user != null)
setting("disableAuth").then((result) => {
if (result) {
callback(null, true)
} else {
exports.login(username, password).then((user) => {
callback(null, user != null)
})
}
})
}
exports.basicAuth = basicAuth({