fuz
/
presence-button-web
mirror of https://github.com/Lomanic/presence-button-web
9
0
Fork 0
Code Issues Releases Wiki Activity

🏜💓 Checkpoint 

./server.js:933874/4925
This commit is contained in:
Glitch (hello-express) 2019-11-03 15:24:00 +00:00
parent 8ecb67deac
commit 9f3e0aa3b1
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
server.js
View File

@ -39,11 +39,19 @@ app.get("/api", (req, res) => {
// http://expressjs.com/en/starter/basic-routing.html
app.get("/status", (req, res) => {
const auth = {login: process.env.MATRIXUSERNAME, password: process.env.MATRIXPASSWORD}; // change this
// http basic auth handling without 3rd-party lib https://stackoverflow.com/a/33905671
const auth = {
login: process.env.MATRIXUSERNAME,
password: process.env.MATRIXPASSWORD
};
// parse login and password from headers
const b64auth = (req.headers.authorization || '').split(' ')[1] || '';
const [login, password] = new Buffer(b64auth, 'base64').toString().split(':');
const b64auth = (req.headers.authorization || "").split(" ")[1] || "";
const [login, password] = new Buffer(b64auth, "base64").toString().split(":"); // won't work as we use : in username…
if (!login || !password || login !== auth.login || password !== auth.password) {
// Access granted...
}
if (req.query.password !== process.env.PASSWORD) {
return res.sendStatus(401);