1
0
mirror of https://api.glitch.com/git/presence-button synced 2024-11-05 11:17:30 +00:00

🏜💓 Checkpoint

./server.js:933874/4925
This commit is contained in:
Glitch (hello-express) 2019-11-03 15:24:00 +00:00
parent 8ecb67deac
commit 9f3e0aa3b1

View File

@ -39,11 +39,19 @@ app.get("/api", (req, res) => {
// http://expressjs.com/en/starter/basic-routing.html // http://expressjs.com/en/starter/basic-routing.html
app.get("/status", (req, res) => { app.get("/status", (req, res) => {
const auth = {login: process.env.MATRIXUSERNAME, password: process.env.MATRIXPASSWORD}; // change this // http basic auth handling without 3rd-party lib https://stackoverflow.com/a/33905671
const auth = {
login: process.env.MATRIXUSERNAME,
password: process.env.MATRIXPASSWORD
};
// parse login and password from headers // parse login and password from headers
const b64auth = (req.headers.authorization || '').split(' ')[1] || ''; const b64auth = (req.headers.authorization || "").split(" ")[1] || "";
const [login, password] = new Buffer(b64auth, 'base64').toString().split(':'); const [login, password] = new Buffer(b64auth, "base64").toString().split(":"); // won't work as we use : in username…
if (!login || !password || login !== auth.login || password !== auth.password) {
// Access granted...
}
if (req.query.password !== process.env.PASSWORD) { if (req.query.password !== process.env.PASSWORD) {
return res.sendStatus(401); return res.sendStatus(401);