done
This commit is contained in:
@@ -14,11 +14,21 @@ async function requireAuth(req, reply) {
|
||||
if (!valid) { reply.redirect('/login'); return; }
|
||||
const token = config.get('authToken');
|
||||
const expiry = config.get('tokenExpiry');
|
||||
const apiClient = require('../api-client');
|
||||
if (!token || apiClient.isTokenExpired(expiry) || value !== token) {
|
||||
if (!token || apiClient.isTokenExpired(expiry)) {
|
||||
reply.redirect('/login');
|
||||
return;
|
||||
}
|
||||
if (value === token) return;
|
||||
const previousToken = config.get('previousAuthToken');
|
||||
if (previousToken && value === previousToken) {
|
||||
const isHttps = (req.protocol === 'https') || ((req.headers['x-forwarded-proto'] || '').toString().toLowerCase() === 'https');
|
||||
reply.setCookie('kitchen_session', token, {
|
||||
signed: true, httpOnly: true, secure: isHttps,
|
||||
sameSite: 'strict', maxAge: 30 * 24 * 60 * 60, path: '/'
|
||||
});
|
||||
return;
|
||||
}
|
||||
reply.redirect('/login');
|
||||
}
|
||||
|
||||
async function settingsRoutes(fastify, options) {
|
||||
|
||||
Reference in New Issue
Block a user