From 6e13b56d0191119198b4b01c8c976453fca00762 Mon Sep 17 00:00:00 2001
From: x <admin@f0ck.it>
Date: Fri, 5 Sep 2025 23:06:42 +0200
Subject: [PATCH] foo

---
 src/inc/lib.mjs           | 13 ++++++++++++-
 src/inc/routes/upload.mjs |  2 +-
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/src/inc/lib.mjs b/src/inc/lib.mjs
index 6bb81d4..aa5628c 100644
--- a/src/inc/lib.mjs
+++ b/src/inc/lib.mjs
@@ -210,7 +210,7 @@ export default new class {
     `)[0].avatar;
   };
 
-  // meddlware
+  // meddlware admin
   async auth(req, res, next) {
     if(!req.session || !req.session.admin) {
       return res.reply({
@@ -221,6 +221,17 @@ export default new class {
     return next();
   };
 
+  // meddlware user
+  async userauth(req, res, next) {
+    if(!req.session) {
+      return res.reply({
+        code: 401,
+        body: "401 - Unauthorized"
+      });
+    }
+    return next();
+  };
+
    async loggedin(req, res, next) {
      if(!req.session) {
        return res.reply({
diff --git a/src/inc/routes/upload.mjs b/src/inc/routes/upload.mjs
index 32b98b8..c301ebd 100644
--- a/src/inc/routes/upload.mjs
+++ b/src/inc/routes/upload.mjs
@@ -1,7 +1,7 @@
 import lib from "../lib.mjs";
 
 export default (router, tpl) => {
-  router.get(/^\/upload$/, lib.auth, async (req, res) => {
+  router.get(/^\/upload$/, lib.userauth, async (req, res) => {
     
     res.reply({
       body: tpl.render('upload', {