temple/Suwayomi-Server
1
0
Fork 0
mirror of https://github.com/Suwayomi/Suwayomi-Server.git synced 2026-07-04 03:14:40 -05:00
Code Issues Packages Projects Releases Wiki Activity

Handle missing credentials as being invalid (#1164)

Browse Source 
In case the credentials were missing the basic authentication was just bypassed
This commit is contained in:
schroda
2024-11-23 02:00:16 +01:00
committed by GitHub
parent fb51834153
commit 38673bbff4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/src/main/kotlin/suwayomi/tachidesk/server/JavalinSetup.kt
View File

@@ -108,7 +108,7 @@ object JavalinSetup {
app.beforeMatched { ctx -> app.beforeMatched { ctx ->
fun credentialsValid(): Boolean { fun credentialsValid(): Boolean {
val basicAuthCredentials = ctx.basicAuthCredentials() ?: return true val basicAuthCredentials = ctx.basicAuthCredentials() ?: return false
val (username, password) = basicAuthCredentials val (username, password) = basicAuthCredentials
return username == serverConfig.basicAuthUsername.value && return username == serverConfig.basicAuthUsername.value &&
password == serverConfig.basicAuthPassword.value password == serverConfig.basicAuthPassword.value