uptime-kuma/server/auth.js

52 lines
1.3 KiB
JavaScript
Raw Normal View History

2021-07-27 20:47:13 +03:00
const basicAuth = require("express-basic-auth")
const passwordHash = require("./password-hash");
const { R } = require("redbean-node");
const { setting } = require("./util-server");
const { debug } = require("../src/util");
2021-07-27 19:52:31 +03:00
/**
*
* @param username : string
* @param password : string
* @returns {Promise<Bean|null>}
*/
exports.login = async function (username, password) {
let user = await R.findOne("user", " username = ? AND active = 1 ", [
2021-07-27 20:47:13 +03:00
username,
2021-07-27 19:52:31 +03:00
])
if (user && passwordHash.verify(password, user.password)) {
// Upgrade the hash to bcrypt
if (passwordHash.needRehash(user.password)) {
await R.exec("UPDATE `user` SET password = ? WHERE id = ? ", [
passwordHash.generate(password),
2021-07-27 20:47:13 +03:00
user.id,
2021-07-27 19:52:31 +03:00
]);
}
return user;
}
2021-07-27 20:47:13 +03:00
return null;
2021-07-27 19:52:31 +03:00
}
function myAuthorizer(username, password, callback) {
setting("disableAuth").then((result) => {
if (result) {
callback(null, true)
} else {
exports.login(username, password).then((user) => {
callback(null, user != null)
})
}
2021-07-27 19:52:31 +03:00
})
2021-07-27 19:52:31 +03:00
}
exports.basicAuth = basicAuth({
authorizer: myAuthorizer,
authorizeAsync: true,
2021-07-27 20:47:13 +03:00
challenge: true,
2021-07-27 19:52:31 +03:00
});