diff --git a/src/middleware/secured.js b/src/middleware/secured.js new file mode 100644 index 0000000..cc397b5 --- /dev/null +++ b/src/middleware/secured.js @@ -0,0 +1,5 @@ +module.exports = (req, res, next) => { + if (!req.isAuthenticated) { + next() + } +} diff --git a/src/routes/index.js b/src/routes/index.js index d44f5f0..f2c856b 100644 --- a/src/routes/index.js +++ b/src/routes/index.js @@ -14,15 +14,12 @@ const pages = require("./pages"); const rssFeed = require("./rssFeed"); const logs = require("./logs"); -const { isDev } = require("../utils/env"); router.get("/error", errorPage); // Landing page after error is logged router.get("/favicon.ico", (req, res) => res.status(204).end()); -if (isDev) { - router.use(logs); -} +router.use(logs); router.post("/track", analytics); router.post("/analytics", analytics); diff --git a/src/routes/logs.js b/src/routes/logs.js index 2d5b444..2fde169 100644 --- a/src/routes/logs.js +++ b/src/routes/logs.js @@ -3,6 +3,7 @@ const Database = require("better-sqlite3"); const path = require("path"); const fs = require("fs"); +const secured = require("../middleware/secured"); const allowedLevels = ["warn", "error", "info", "debug", "functions", "notice"]; const allowedTypes = ["testing", "live", "dev"]; @@ -17,11 +18,11 @@ const db = new Database(dbPath, { readonly: true }); -router.get("/logs", (req, res) => { +router.get("/logs", secured, (req, res) => { res.renderWithBaseContext("pages/logs", { layout: "logs" }); }); -router.post("/logs", (req, res) => { +router.post("/logs", secured, (req, res) => { const log_type = req.query.log_type || "*"; const log_level = req.query.log_level || "*"; const date = req.query.date || "*";