This commit is contained in:
odzugkoev
2026-03-01 17:10:03 -05:00
parent 7e0887c62d
commit 85cf732a61
19 changed files with 2284 additions and 32 deletions

View File

@@ -11,10 +11,20 @@ async function requireAuth(req, reply) {
if (!valid) { return reply.code(401).send({ error: true, message: 'Not authenticated' }); }
const token = config.get('authToken');
const expiry = config.get('tokenExpiry');
const apiClient = require('../api-client');
if (!token || apiClient.isTokenExpired(expiry) || value !== token) {
if (!token || apiClient.isTokenExpired(expiry)) {
return reply.code(401).send({ error: true, message: 'Not authenticated' });
}
if (value === token) return;
const previousToken = config.get('previousAuthToken');
if (previousToken && value === previousToken) {
const isHttps = (req.protocol === 'https') || ((req.headers['x-forwarded-proto'] || '').toString().toLowerCase() === 'https');
reply.setCookie('kitchen_session', token, {
signed: true, httpOnly: true, secure: isHttps,
sameSite: 'strict', maxAge: 30 * 24 * 60 * 60, path: '/'
});
return;
}
return reply.code(401).send({ error: true, message: 'Not authenticated' });
}
async function ordersRoutes(fastify, options) {