mirrors/dbgate
1
0
Fork 0
mirror of https://github.com/dbgate/dbgate synced 2024-11-07 20:26:23 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

Merge pull request #770 from michael-pattern/feat/763/per-user_permissions_when_using_oauth

Browse Source 
feat: per-user permissions when using oauth
This commit is contained in:
Jan Prochazka 2024-05-09 14:20:12 +02:00 committed by GitHub
commit 39cdaf88f4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/api/src/controllers/auth.js
View File

@ -137,7 +137,7 @@ module.exports = {
return { error: 'Logins not configured' };
}
const foundLogin = logins.find(x => x.login == login);
if (foundLogin && foundLogin.password == password) {
if (foundLogin && foundLogin.password && foundLogin.password == password) {
return {
accessToken: jwt.sign({ login }, tokenSecret, { expiresIn: getTokenLifetime() }),
};

2
packages/api/src/main.js
View File

@ -48,7 +48,7 @@ function start() {
if (logins && process.env.BASIC_AUTH) {
app.use(
basicAuth({
users: _.fromPairs(logins.map(x => [x.login, x.password])),
users: _.fromPairs(logins.filter(x => x.password).map(x => [x.login, x.password])),
challenge: true,
realm: 'DbGate Web App',
})

9
packages/api/src/utility/hasPermission.js
View File

@ -39,7 +39,7 @@ function getLogins() {
permissions: process.env.PERMISSIONS,
});
}
if (process.env.LOGINS) {
if (process.env.LOGINS || process.env.OAUTH_PERMISSIONS) {
const logins = _.compact(process.env.LOGINS.split(',').map(x => x.trim()));
for (const login of logins) {
const password = process.env[`LOGIN_PASSWORD_${login}`];
@ -51,6 +51,13 @@ function getLogins() {
permissions,
});
}
if (process.env.OAUTH_PERMISSIONS) {
res.push({
login,
password: null,
permissions,
})
}
}
}