0
0
mirror of https://github.com/naturalcrit/homebrewery.git synced 2026-01-07 07:42:39 +00:00
This commit is contained in:
Víctor Losada Hernández
2024-09-16 23:03:50 +02:00
parent e2ae6898fd
commit 8e4fc01831

View File

@@ -17,24 +17,24 @@ process.env.ADMIN_USER = process.env.ADMIN_USER || 'admin';
process.env.ADMIN_PASS = process.env.ADMIN_PASS || 'password3'; process.env.ADMIN_PASS = process.env.ADMIN_PASS || 'password3';
const mw = { const mw = {
adminOnly: [ adminOnly : [
loginLimiter, loginLimiter,
(req, res, next) => { (req, res, next)=>{
if (!req.get('authorization')) { if(!req.get('authorization')) {
return res return res
.set('WWW-Authenticate', 'Basic realm="Authorization Required"') .set('WWW-Authenticate', 'Basic realm="Authorization Required"')
.status(401) .status(401)
.send('Authorization Required'); .send('Authorization Required');
} }
const [username, password] = Buffer.from(req.get('authorization').split(' ').pop(), 'base64') const [username, password] = Buffer.from(req.get('authorization').split(' ').pop(), 'base64')
.toString('ascii') .toString('ascii')
.split(':'); .split(':');
if (process.env.ADMIN_USER === username && process.env.ADMIN_PASS === password) { if(process.env.ADMIN_USER === username && process.env.ADMIN_PASS === password) {
return next(); return next();
} }
throw { HBErrorCode: '53', code: 401, message: 'Access denied' }; throw { HBErrorCode: '53', code: 401, message: 'Access denied' };
} }
] ]
}; };
const junkBrewPipeline = [ const junkBrewPipeline = [