Mirrors/WGDashboard
1
0
Fork 0
mirror of https://github.com/donaldzou/WGDashboard.git synced 2026-04-20 03:36:17 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Updated version number

Browse Source
This commit is contained in:
Donald Zou
2026-03-29 14:30:24 +08:00
parent 920f832297
commit ddaada8e4f
54 changed files with 78 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/dashboard.py
View File

@@ -246,18 +246,26 @@ def auth_req():
DashboardConfig.APIAccessed = True
else:
DashboardConfig.APIAccessed = False
whiteList = [
'/static/', 'validateAuthentication', 'authenticate', 'getDashboardConfiguration',
'getDashboardTheme', 'getDashboardVersion', 'sharePeer/get', 'isTotpEnabled', 'locale',
]
appPrefix = APP_PREFIX if len(APP_PREFIX) > 0 else ''
clientPrefix = f"{appPrefix}/client"
whiteList = [
# f'/static/',
f'{appPrefix}/api/validateAuthentication',
f'{appPrefix}/api/authenticate',
# f'{appPrefix}/api/getDashboardConfiguration',
f'{appPrefix}/api/getDashboardTheme',
f'{appPrefix}/api/getDashboardVersion',
f'{appPrefix}/api/sharePeer/get',
f'{appPrefix}/api/isTotpEnabled',
f'{appPrefix}/api/locale',
]
if (("username" not in session or session.get("role") != "admin")
and (f"{appPrefix}/" != request.path
and f"{appPrefix}" != request.path)
and not request.path.startswith(clientPrefix)
and len(list(filter(lambda x : x not in request.path, whiteList))) == len(whiteList)
if (
("username" not in session or session.get("role") != "admin")
and (f"{appPrefix}/" != request.path and f"{appPrefix}" != request.path)
and not request.path.startswith(f'{appPrefix}/client')
and not request.path.startswith(f'{appPrefix}/static')
and request.path not in whiteList
):
response = Flask.make_response(app, {
"status": False,