Aaltronav/dougal-software
1
0
Fork 0
mirror of https://gitlab.com/wgp/dougal/software.git synced 2025-12-06 12:57:08 +00:00
Code Issues Packages Projects Releases Activity

Don't require authentication for the /version endpoint.

Browse Source 
It will still hide the `db` and `os` values from non-admins though.
This commit is contained in:
D. Berge
2023-11-02 23:48:46 +01:00
parent 2e21526fca
commit c615727acf
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/www/server/api/index.js
View File

@@ -75,6 +75,9 @@ app.map({
get: [ mw.user.logout ],
post: [ mw.user.logout ]
},
'/version': {
get: [ mw.version.get ]
},
'/': {
get: [ mw.openapi.get ]
}
@@ -87,9 +90,6 @@ app.use(mw.etag.ifNoneMatch);
// We must be authenticated before we can access these
app.map({
'/version': {
get: [ mw.version.get ]
},
'/project': {
get: [ mw.project.get ], // Get list of projects
post: [ mw.auth.access.admin, mw.project.post ], // Create a new project

2
lib/www/server/api/middleware/version/get.js
View File

@@ -5,7 +5,7 @@ module.exports = async function (req, res, next) {
try {
const v = await version();
if (req.user.role != "admin" && req.user.role != "user") {
if (req.user?.role != "admin" && req.user?.role != "user") {
delete v.os;
delete v.db;
}