jketreno/ketr.photos
1
0
Fork 0
Code Issues 1 Activity

Added 'restrictions' list in config to limit album access

Browse Source 
Signed-off-by: James Ketrenos <james_git@ketrenos.com>
This commit is contained in:
James Ketr 2018-09-20 21:04:15 -07:00
parent e9fd50a054
commit 979c2387e1
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
server/app.js
View File

@ -90,6 +90,21 @@ app.use(basePath, function(req, res, next) {
if (!req.session || !req.session.user || !req.session.user.username) { if (!req.session || !req.session.user || !req.session.user.username) {
return res.status(401).send("Unauthorized"); return res.status(401).send("Unauthorized");
} }
if (config.has("restrictions")) {
let allowed = config.get("restrictions");
if (!Array.isArray(allowed)) {
allowed = [ allowed ];
}
for (let i = 0; i < allowed.length; i++) {
if (allowed[i] == req.session.user.username) {
return next();
}
}
console.log("Unauthorized (logged in) access by user: " + req.session.user.username);
return res.status(401).send("Unauthorized");
}
return next(); return next();
}); });

1
server/scanner.js
View File

@ -194,7 +194,6 @@ const mkdir = function (_path) {
} }
return new Promise(function (resolve, reject) { return new Promise(function (resolve, reject) {
console.log("mkdir " + path);
fs.mkdir(path, function (error) { fs.mkdir(path, function (error) {
if (error) { if (error) {
return reject(error); return reject(error);