groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-07-27 03:31:46 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

Forward Auth refactor and adding PROXY_FORWARD_AUTH_LOGOUT_URI env

Browse source
This commit is contained in:
advplyr 2022-12-18 11:37:45 -06:00
parent 8558baf30a
commit 73a61872fa
9 changed files with 139 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

7
server/controllers/MiscController.js
View file

@ -120,6 +120,13 @@ class MiscController {
Logger.error('Invalid user in authorize')
return res.sendStatus(401)
}
// When authorizing an API token and forward auth is enabled then validate user using forward auth headers
if (global.ForwardAuth.Enabled && !this.auth.validateForwardAuthUser(req)) {
Logger.error(`[MiscController] Authorize token with forward auth enabled failed for user "${req.user.username}"`)
return res.sendStatus(403)
}
const userResponse = this.auth.getUserLoginResponsePayload(req.user, this.rssFeedManager.feedsArray)
res.json(userResponse)
}