aheh/mirotalk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[mirotalk] - #168 use post method for login page

Browse Source
This commit is contained in:
Miroslav Pejic
2023-07-12 19:36:24 +02:00
parent cdf8ce4549
commit 06f1bd207b
2 changed files with 30 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/src/server.js
+13 -7
View File
@@ -248,28 +248,33 @@ app.use((err, req, res, next) => {
// main page
app.get(['/'], (req, res) => {
if (hostCfg.protected == true) {
hostCfg.authenticated = false;
res.sendFile(views.login);
const ip = getIP(req);
if (allowedIP(ip)) {
res.sendFile(views.landing);
} else {
hostCfg.authenticated = false;
res.sendFile(views.login);
}
} else {
res.sendFile(views.landing);
}
});
// handle login on host protected
app.get(['/login'], (req, res) => {
app.post(['/login'], (req, res) => {
if (hostCfg.protected == true) {
const ip = getIP(req);
log.debug(`Request login to host from: ${ip}`, req.query);
const { username, password } = checkXSS(req.query);
log.debug(`Request login to host from: ${ip}`, req.body);
const { username, password } = checkXSS(req.body);
if (username == hostCfg.username && password == hostCfg.password) {
hostCfg.authenticated = true;
authHost = new Host(ip, true);
log.debug('LOGIN OK', { ip: ip, authorized: authHost.isAuthorized(ip) });
res.sendFile(views.landing);
res.status(200).json({ message: 'authorized' });
} else {
log.debug('LOGIN KO', { ip: ip, authorized: false });
hostCfg.authenticated = false;
res.sendFile(views.login);
res.status(401).json({ message: 'unauthorized' });
}
} else {
res.redirect('/');
@@ -1253,6 +1258,7 @@ function allowedIP(ip) {
function removeIP(socket) {
if (hostCfg.protected == true) {
const ip = socket.handshake.address;
log.debug('Host protected check ip', { ip: ip });
if (ip && allowedIP(ip)) {
authHost.deleteIP(ip);
hostCfg.authenticated = false;
public/views/login.html
+17 -1
View File
@@ -48,6 +48,10 @@
<!-- xss -->
<script src="https://rawgit.com/leizongmin/js-xss/master/dist/xss.js"></script>
<!-- axios -->
<script type="text/javascript" src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>
</head>
<body class="has-animations">
<div class="body-wrap">
@@ -128,7 +132,19 @@
let password = filterXSS(document.getElementById('password').value);
if (username && password) {
window.location.href = `/login?username=${username}&password=${password}`;
axios
.post('/login', {
username: username,
password: password,
})
.then(function (response) {
console.log(response);
window.location.href = '/';
})
.catch(function (error) {
console.error(error);
alert('Unauthorized');
});
return;
}
if (!username && !password) {