even though trilium APIs are still exposed in electron, they require login if not called directly from electron

This commit is contained in:
azivner 2017-11-30 23:29:21 -05:00
parent 81719f84a0
commit 5f3a11af47
2 changed files with 5 additions and 2 deletions

View file

@ -7,6 +7,9 @@ function init(app) {
req.method = arg.method;
req.body = arg.data;
req.headers = arg.headers;
req.session = {
loggedIn: true
};
const res = {
statusCode: 200

View file

@ -25,7 +25,7 @@ async function checkAuthForMigrationPage(req, res, next) {
}
async function checkApiAuth(req, res, next) {
if (!req.session.loggedIn && !utils.isElectron()) {
if (!req.session.loggedIn) {
res.status(401).send("Not authorized");
}
else if (await migration.isDbUpToDate()) {
@ -37,7 +37,7 @@ async function checkApiAuth(req, res, next) {
}
async function checkApiAuthForMigrationPage(req, res, next) {
if (!req.session.loggedIn && !utils.isElectron()) {
if (!req.session.loggedIn) {
res.status(401).send("Not authorized");
}
else {