fix(web): do not include session flows in non-acl mode

immobiliare · Oct 10, 2022 · e18e572 · e18e572
1 parent 66d9776
commit e18e572
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/server/middleware/session.go b/server/middleware/session.go
@@ -13,6 +13,7 @@ const LoginPath = "/web/login"
 func Session(store *session.Store, acl map[string][]string) fiber.Handler {
 	return func(c *fiber.Ctx) error {
 		if c.Path() == LoginPath || len(acl) == 0 {
+			_ = c.Bind(fiber.Map{"unprotected": true})
 			return c.Next()
 		}
 

diff --git a/server/views/base.html.j2 b/server/views/base.html.j2
@@ -10,7 +10,7 @@
   <link rel="stylesheet" href="/static/style.css"/>
   {% block head %}{% endblock %}
   <style>
-      {% block style %}{% endblock %}
+    {% block style %}{% endblock %}
   </style>
 
 </head>
@@ -22,17 +22,19 @@
 
   <header>
     <div>
-{% if authenticated %}
+{% if authenticated or unprotected %}
       <a href="/">Inca</a>
 {% else %}
       <span>Inca</span>
 {% endif %}
     </div>
     <ul>
-{% if authenticated %}
+{% if authenticated or unprotected %}
         <li><a href="/">home</a></li>
         <li><a href="/web/config">config</a></li>
+  {% if not unprotected %}
         <li><a href="/web/logout">logout</a></li>
+  {% endif %}
 {% endif %}
     </ul>
     <hr/>