melosh/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow public search routes and prevent js redeclaration

Browse Source
This commit is contained in:
mkelvers
2026-04-07 05:14:43 +02:00
parent db235c5d96
commit aff336c15f
2 changed files with 64 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/shared/middleware/auth.go
View File

@@ -61,8 +61,10 @@ func RequireAuth(next http.Handler) http.Handler {
// RequireGlobalAuth ensures that a valid user is in the context for all routes except login and static
func RequireGlobalAuth(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
// Allow unauthenticated access to login and static files
if r.URL.Path == "/login" || strings.HasPrefix(r.URL.Path, "/static/") {
// Allow unauthenticated access to login, search, and static files
if r.URL.Path == "/login" || strings.HasPrefix(r.URL.Path, "/static/") ||
r.URL.Path == "/search" || r.URL.Path == "/api/search" || r.URL.Path == "/api/search-quick" ||
r.URL.Path == "/" {
next.ServeHTTP(w, r)
return
}