unified auth exceptions, added syncdata and selfinfo

src/middlewares/auth.middleware.ts

@@ -25,9 +25,18 @@ import type { Database } from 'better-sqlite3'
 import logger from '../utils/logger'
 import dbtools from '../utils/dbtools'
 
+const EXCEPTIONS = [
+    '/api/registerscript',
+    '/api/login',
+    '/api/validationtoken',
+    '/api/syncp2pdata',
+    '/api/selfInfo',
+    '/favicon.ico',
+    '/img/frylabs-logo_large_transparent.png',
+] as const
+
 interface Options {
     userDB: Database
-    exceptions: Array<string>
 }
 
 export const testUser: User = {
@@ -55,17 +64,11 @@ function renderLogin(req: Request, res: Response) {
 }
 
 export default function (options: Options): RequestHandler {
-    const {
-        userDB,
-        exceptions,
-    }: {
-        userDB: Database
-        exceptions: string[]
-    } = options
+    const { userDB } = options
 
     return function (req: Request, res: Response, next: NextFunction) {
         const sessionID = req.cookies.sessionID
-        const isException = exceptions.some((exc) => {
+        const isException = EXCEPTIONS.some((exc) => {
             return req.originalUrl.split('?')[0] === exc
         })
 

src/modules/api/api.ts

@@ -83,15 +83,6 @@ function GetApp(): ModuleType {
     app.use(
         auth({
             userDB: userDB,
-            exceptions: [
-                '/favicon.ico',
-                '/api/register',
-                '/api/login',
-                '/api/postfeedback',
-                '/api/fosuploader',
-                '/api/badtestsender',
-                '/api/validationtoken',
-            ],
         })
     )
     app.use(

src/modules/api/submodules/p2p.ts

@@ -1037,7 +1037,7 @@ function setup(data: SubmoduleData): Submodule {
     app.get('/syncp2pdata', (req: Request, res: Response) => {
         logger.LogReq(req)
         const user = req.session.user
-        if (user.id !== 1) {
+        if (!user || user.id !== 1) {
             res.json({
                 status: 'error',
                 msg: 'only user 1 can call this EP',

src/modules/dataEditor/dataEditor.ts

@@ -52,7 +52,6 @@ function GetApp(): ModuleType {
     app.use(
         auth({
             userDB: userDB,
-            exceptions: ['/favicon.ico'],
         })
     )
     app.use((req: Request, _res, next) => {

src/modules/qmining/qmining.ts

@@ -53,16 +53,6 @@ function GetApp(): ModuleType {
     app.use(
         auth({
             userDB: userDB,
-            exceptions: [
-                '/favicon.ico',
-                '/img/frylabs-logo_large_transparent.png',
-                '/api/register',
-                '/api/login',
-                '/api/postfeedback',
-                '/api/fosuploader',
-                '/api/badtestsender',
-                '/api/validationtoken',
-            ],
         })
     )
     app.use((req: Request, _res, next) => {