From 1791533e0eae20edcec453d319a9ec0d8db063e8 Mon Sep 17 00:00:00 2001 From: gabek Date: Thu, 25 Aug 2022 23:17:24 +0000 Subject: Optionally require auth for the /upload endpoint (#23) Reviewed-on: https://git.mills.io/prologic/tube/pulls/23 Co-authored-by: gabek Co-committed-by: gabek --- app/app.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'app/app.go') diff --git a/app/app.go b/app/app.go index aed83c6..f726e83 100644 --- a/app/app.go +++ b/app/app.go @@ -14,9 +14,11 @@ import ( "sort" "strings" + "git.mills.io/prologic/tube/app/middleware" "git.mills.io/prologic/tube/importers" "git.mills.io/prologic/tube/media" "git.mills.io/prologic/tube/utils" + rice "github.com/GeertJohan/go.rice" "github.com/dustin/go-humanize" "github.com/fsnotify/fsnotify" @@ -95,9 +97,11 @@ func NewApp(cfg *Config) (*App, error) { a.Templates.Add("import", importTemplate) // Setup Router + authPassword := os.Getenv("auth_password") + r := mux.NewRouter().StrictSlash(true) r.HandleFunc("/", a.indexHandler).Methods("GET", "OPTIONS") - r.HandleFunc("/upload", a.uploadHandler).Methods("GET", "OPTIONS", "POST") + r.HandleFunc("/upload", middleware.OptionallyRequireAdminAuth(a.uploadHandler, authPassword)).Methods("GET", "OPTIONS", "POST") r.HandleFunc("/import", a.importHandler).Methods("GET", "OPTIONS", "POST") r.HandleFunc("/v/{id}.mp4", a.videoHandler).Methods("GET") r.HandleFunc("/v/{prefix}/{id}.mp4", a.videoHandler).Methods("GET") -- cgit v1.2.3