Implement session-based authentication and add logout functionality

Fix #15
This commit is contained in:
2025-01-24 22:02:54 +01:00
parent da2f568acf
commit 23a39247a1
6 changed files with 104 additions and 12 deletions

View File

@@ -1,15 +1,10 @@
const basicAuth = require('basic-auth');
const auth = (req, res, next) => {
const user = basicAuth(req);
const username = process.env.AUTH_USERNAME; // Use environment variables
const password = process.env.AUTH_PASSWORD; // Use environment variables
if (user && user.name === username && user.pass === password) {
if (req.session && req.session.user) {
return next();
} else {
res.set('WWW-Authenticate', 'Basic realm="401"');
return res.status(401).send('Authentication required.');
res.status(401).send('Authentication required.');
}
};