melosh/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow public search routes and prevent js redeclaration

Browse Source
This commit is contained in:
mkelvers
2026-04-07 05:14:43 +02:00
parent db235c5d96
commit aff336c15f
2 changed files with 64 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/shared/middleware/auth.go
View File

@@ -61,8 +61,10 @@ func RequireAuth(next http.Handler) http.Handler {
// RequireGlobalAuth ensures that a valid user is in the context for all routes except login and static
func RequireGlobalAuth(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
// Allow unauthenticated access to login and static files
if r.URL.Path == "/login" || strings.HasPrefix(r.URL.Path, "/static/") {
// Allow unauthenticated access to login, search, and static files
if r.URL.Path == "/login" || strings.HasPrefix(r.URL.Path, "/static/") ||
r.URL.Path == "/search" || r.URL.Path == "/api/search" || r.URL.Path == "/api/search-quick" ||
r.URL.Path == "/" {
next.ServeHTTP(w, r)
return
}

59
static/js/search.js
View File

@@ -1,15 +1,19 @@
let searchTimeout;
const searchInput = document.getElementById('search-input');
const searchDropdown = document.getElementById('search-dropdown');
(function() {
if (window.searchInitialized) return
window.searchInitialized = true
let searchTimeout
const searchInput = document.getElementById('search-input')
const searchDropdown = document.getElementById('search-dropdown')
if (searchInput) {
searchInput.addEventListener('input', function(e) {
clearTimeout(searchTimeout);
const query = e.target.value.trim();
clearTimeout(searchTimeout)
const query = e.target.value.trim()
if (query.length < 2) {
searchDropdown.innerHTML = '';
return;
searchDropdown.innerHTML = ''
return
}
searchTimeout = setTimeout(() => {
@@ -17,12 +21,12 @@ if (searchInput) {
.then(res => res.json())
.then(results => {
if (!results || results.length === 0) {
searchDropdown.innerHTML = '';
return;
searchDropdown.innerHTML = ''
return
}
let html = '<div class="search-results">';
html += '<div class="search-results-title">Anime</div>';
let html = '<div class="search-results">'
html += '<div class="search-results-title">Anime</div>'
results.forEach(r => {
html += `
<a href="/anime/${r.id}" class="search-result-item">
@@ -32,31 +36,32 @@ if (searchInput) {
<div class="search-result-type">${r.type}</div>
</div>
</a>
`;
});
html += `<a href="/search?q=${encodeURIComponent(query)}" class="search-result-view-all">View all results for ${escapeHtml(query)}</a>`;
html += '</div>';
searchDropdown.innerHTML = html;
`
})
html += `<a href="/search?q=${encodeURIComponent(query)}" class="search-result-view-all">View all results for ${escapeHtml(query)}</a>`
html += '</div>'
searchDropdown.innerHTML = html
})
.catch(err => console.error('Search error:', err))
}, 300)
})
.catch(err => console.error('Search error:', err));
}, 300);
});
searchInput.addEventListener('blur', () => {
setTimeout(() => {
searchDropdown.innerHTML = '';
}, 200);
});
searchDropdown.innerHTML = ''
}, 200)
})
document.addEventListener('click', (e) => {
if (!e.target.closest('.header-search-wrapper')) {
searchDropdown.innerHTML = '';
searchDropdown.innerHTML = ''
}
});
})
}
function escapeHtml(text) {
const div = document.createElement('div');
div.textContent = text;
return div.innerHTML;
const div = document.createElement('div')
div.textContent = text
return div.innerHTML
}
})()