mirrors/remark42
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

don't retrun ww-auth header

Browse Source
This commit is contained in:
Umputun
2018-02-22 13:21:01 -06:00
parent c96042cdf2
commit 94dbca0006
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/rest/auth/auth.go
+2 -6
View File
@@ -37,7 +37,7 @@ func (a *Authenticator) Auth(reqAuth bool) func(http.Handler) http.Handler {
f := func(h http.Handler) http.Handler {
fn := func(w http.ResponseWriter, r *http.Request) {
if a.basicDevUser(w, r, reqAuth) { // fail-back to dev user if enabled
if a.basicDevUser(w, r) { // fail-back to dev user if enabled
user := devUser
ctx := r.Context()
ctx = context.WithValue(ctx, rest.ContextKey("user"), user)
@@ -103,16 +103,12 @@ func (a *Authenticator) AdminOnly(next http.Handler) http.Handler {
return http.HandlerFunc(fn)
}
func (a *Authenticator) basicDevUser(w http.ResponseWriter, r *http.Request, reqAuth bool) bool {
func (a *Authenticator) basicDevUser(w http.ResponseWriter, r *http.Request) bool {
if a.DevPasswd == "" || !a.DevEnabled {
return false
}
if reqAuth {
w.Header().Set("WWW-Authenticate", `Basic realm="Restricted"`)
}
s := strings.SplitN(r.Header.Get("Authorization"), " ", 2)
if len(s) != 2 {
return false