kibi/f0ckm
1
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

update private_society to allow direct urls

Browse Source
This commit is contained in:
Kibi Kelburton
2026-06-13 16:05:54 +02:00
parent fb2489812e
commit 9df81105e2
1 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
src/index.mjs
View File

@@ -487,14 +487,18 @@ process.on('uncaughtException', err => {
if (req.url.pathname === '/manifest.json' || req.url.pathname === '/sw.js') if (req.url.pathname === '/manifest.json' || req.url.pathname === '/sw.js')
return; return;
if (req.url.pathname.match(/^\/(b|c|t|ca|a|memes)\//) || req.url.pathname.startsWith('/s/emojis/')) { if (req.url.pathname.match(/^\/(b|c|t|ca|a|memes)\//) || req.url.pathname.startsWith('/s/emojis/')) {
if (cfg.websrv.private_society && !req.cookies?.session) { // protect_files gates raw file URLs behind a session (401 if not logged in).
res.writeHead(200, { 'Content-Type': 'text/html' }).end(nginx502 ?? buildGatePage(req)); // private_society also gates file URLs — but only when protect_files is ALSO enabled.
req.url.pathname = '/private_society_media_bypass'; // If private_society is on but protect_files is off, direct file URLs are intentionally
return; // left public so they can be shared without requiring a login.
}
if (getProtectFiles() && !req.cookies?.session) { if (getProtectFiles() && !req.cookies?.session) {
res.writeHead(401).end('Unauthorized'); if (cfg.websrv.private_society) {
req.url.pathname = '/protect_files_bypass'; res.writeHead(200, { 'Content-Type': 'text/html' }).end(nginx502 ?? buildGatePage(req));
req.url.pathname = '/private_society_media_bypass';
} else {
res.writeHead(401).end('Unauthorized');
req.url.pathname = '/protect_files_bypass';
}
return; return;
} }
return; return;