This commit is contained in:
Christopher Cookman 2025-08-31 23:05:40 -06:00
parent 91607b40ec
commit 8888e7e75e

View file

@ -56,20 +56,11 @@ global.checkACL = function(req, perm) {
};
app.use((req, res, next) => {
const allowed = ["/", "/login", "/static/*", "/favicon.ico", "/robots.txt"];
const isAllowed = allowed.some(pattern => {
if (pattern.endsWith('*')) {
return req.path.startsWith(pattern.slice(0, -1));
}
return req.path === pattern;
});
if (isAllowed) {
return next();
}
if (!req.session.user) {
return res.redirect('/login?err=4');
}
res.redirect('/login')
if (req.session.user) return next();
if (req.path === '/login' || req.path === '/login/') return next();
if (req.path === '/logout' || req.path === '/logout/') return next();
if (req.path.startsWith('/public/') || req.path === '/favicon.ico' || req.path === '/robots.txt') return next();
res.redirect('/login?err=4');
});
app.use(cors());
app.use(express.json());