Require auth middleware only on GET requests

This commit is contained in:
Gabe Kangas
2022-06-05 22:46:46 -07:00
parent 26eebf47d5
commit d6814b516a
2 changed files with 5 additions and 2 deletions

View File

@@ -6,13 +6,16 @@ import (
ia "github.com/owncast/owncast/auth/indieauth"
"github.com/owncast/owncast/controllers"
"github.com/owncast/owncast/router/middleware"
)
// HandleAuthEndpoint will handle the IndieAuth auth endpoint.
func HandleAuthEndpoint(w http.ResponseWriter, r *http.Request) {
if r.Method == http.MethodGet {
// Require the GET request for IndieAuth to be behind admin login.
handleAuthEndpointGet(w, r)
f := middleware.RequireAdminAuth(handleAuthEndpointGet)
f(w, r)
return
} else if r.Method == http.MethodPost {
handleAuthEndpointPost(w, r)
} else {