melosh/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow public search routes and prevent js redeclaration

Browse Source
This commit is contained in:
mkelvers
2026-04-07 05:14:43 +02:00
parent db235c5d96
commit aff336c15f
2 changed files with 64 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/shared/middleware/auth.go
View File

@@ -61,8 +61,10 @@ func RequireAuth(next http.Handler) http.Handler {
// RequireGlobalAuth ensures that a valid user is in the context for all routes except login and static // RequireGlobalAuth ensures that a valid user is in the context for all routes except login and static
func RequireGlobalAuth(next http.Handler) http.Handler { func RequireGlobalAuth(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
// Allow unauthenticated access to login and static files // Allow unauthenticated access to login, search, and static files
if r.URL.Path == "/login" || strings.HasPrefix(r.URL.Path, "/static/") { if r.URL.Path == "/login" || strings.HasPrefix(r.URL.Path, "/static/") ||
r.URL.Path == "/search" || r.URL.Path == "/api/search" || r.URL.Path == "/api/search-quick" ||
r.URL.Path == "/" {
next.ServeHTTP(w, r) next.ServeHTTP(w, r)
return return
} }

115
static/js/search.js
View File

@@ -1,62 +1,67 @@
let searchTimeout; (function() {
const searchInput = document.getElementById('search-input'); if (window.searchInitialized) return
const searchDropdown = document.getElementById('search-dropdown'); window.searchInitialized = true
if (searchInput) { let searchTimeout
searchInput.addEventListener('input', function(e) { const searchInput = document.getElementById('search-input')
clearTimeout(searchTimeout); const searchDropdown = document.getElementById('search-dropdown')
const query = e.target.value.trim();
if (query.length < 2) { if (searchInput) {
searchDropdown.innerHTML = ''; searchInput.addEventListener('input', function(e) {
return; clearTimeout(searchTimeout)
} const query = e.target.value.trim()
searchTimeout = setTimeout(() => { if (query.length < 2) {
fetch('/api/search-quick?q=' + encodeURIComponent(query)) searchDropdown.innerHTML = ''
.then(res => res.json()) return
.then(results => { }
if (!results || results.length === 0) {
searchDropdown.innerHTML = '';
return;
}
let html = '<div class="search-results">'; searchTimeout = setTimeout(() => {
html += '<div class="search-results-title">Anime</div>'; fetch('/api/search-quick?q=' + encodeURIComponent(query))
results.forEach(r => { .then(res => res.json())
html += ` .then(results => {
<a href="/anime/${r.id}" class="search-result-item"> if (!results || results.length === 0) {
${r.image ? `<img src="${r.image}" alt="${r.title}" class="search-result-thumb" />` : '<div class="search-result-no-image">no image</div>'} searchDropdown.innerHTML = ''
<div class="search-result-info"> return
<div class="search-result-title">${escapeHtml(r.title)}</div> }
<div class="search-result-type">${r.type}</div>
</div>
</a>
`;
});
html += `<a href="/search?q=${encodeURIComponent(query)}" class="search-result-view-all">View all results for ${escapeHtml(query)}</a>`;
html += '</div>';
searchDropdown.innerHTML = html;
})
.catch(err => console.error('Search error:', err));
}, 300);
});
searchInput.addEventListener('blur', () => { let html = '<div class="search-results">'
setTimeout(() => { html += '<div class="search-results-title">Anime</div>'
searchDropdown.innerHTML = ''; results.forEach(r => {
}, 200); html += `
}); <a href="/anime/${r.id}" class="search-result-item">
${r.image ? `<img src="${r.image}" alt="${r.title}" class="search-result-thumb" />` : '<div class="search-result-no-image">no image</div>'}
<div class="search-result-info">
<div class="search-result-title">${escapeHtml(r.title)}</div>
<div class="search-result-type">${r.type}</div>
</div>
</a>
`
})
html += `<a href="/search?q=${encodeURIComponent(query)}" class="search-result-view-all">View all results for ${escapeHtml(query)}</a>`
html += '</div>'
searchDropdown.innerHTML = html
})
.catch(err => console.error('Search error:', err))
}, 300)
})
document.addEventListener('click', (e) => { searchInput.addEventListener('blur', () => {
if (!e.target.closest('.header-search-wrapper')) { setTimeout(() => {
searchDropdown.innerHTML = ''; searchDropdown.innerHTML = ''
} }, 200)
}); })
}
function escapeHtml(text) { document.addEventListener('click', (e) => {
const div = document.createElement('div'); if (!e.target.closest('.header-search-wrapper')) {
div.textContent = text; searchDropdown.innerHTML = ''
return div.innerHTML; }
} })
}
function escapeHtml(text) {
const div = document.createElement('div')
div.textContent = text
return div.innerHTML
}
})()