livebook-dev/livebook
1
1
Fork 0
mirror of https://github.com/livebook-dev/livebook.git synced 2025-12-19 22:49:23 +08:00
Code Issues Projects Releases Packages Wiki Activity

List user plug before auth

Browse source 
We should not allow someone to list apps
if they don't have a user.
This commit is contained in:
José Valim 2023-10-18 01:06:28 +02:00
parent 9e8c6ec83e
commit 7c7d8c14cc
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/livebook_web/router.ex
View file

@ -22,8 +22,10 @@ defmodule LivebookWeb.Router do
end end
pipeline :auth do pipeline :auth do
plug LivebookWeb.AuthPlug # If identity provider is enabled and we don't have access
# we don't want to show Livebook's authentication
plug LivebookWeb.UserPlug plug LivebookWeb.UserPlug
plug LivebookWeb.AuthPlug
end end
pipeline :user do pipeline :user do
@ -141,7 +143,7 @@ defmodule LivebookWeb.Router do
end end
scope "/authenticate", LivebookWeb do scope "/authenticate", LivebookWeb do
pipe_through :browser pipe_through [:browser, :user]
get "/", AuthController, :index get "/", AuthController, :index
post "/", AuthController, :authenticate post "/", AuthController, :authenticate