pixies

1import * as config from '../controller/config.js';
2import bcrypt from 'bcryptjs';
3import { readPasswords } from '../util/passwordHeader.js';
4
5export default (allowViewAccess) => async (req, res, next) => {
6    if (process.env.PREVIEW_MODE === "true") return next();
7
8    let passwordHash = await config.getValue("password");
9    let passwordLevel = await config.getValue("passwordLevel");
10
11    if (passwordHash === "none") {
12        req.viewMode = false;
13        return next();
14    }
15
16    if (readPasswords(req).some(candidate => bcrypt.compareSync(candidate, passwordHash))) {
17        req.viewMode = false;
18        return next();
19    }
20
21    if (passwordLevel === "read" && allowViewAccess) {
22        req.viewMode = true;
23        return next();
24    }
25
26    return res.status(401).json({message: "Please provide the correct password in the header"});
27};