usememos/memos
1
1
Fork 0
mirror of https://github.com/usememos/memos.git synced 2024-12-20 01:31:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat(security): disable access for anonymous users, when disablePublicMemos is true (#1966)

Browse Source
This commit is contained in:
Alexandr Tumaykin 2023-07-17 04:12:53 +03:00 committed by GitHub
parent 4ac63ba1f0
commit e36e5823cd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 53 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
web/src/components/Header.tsx
View File

@ -95,20 +95,24 @@ const Header = () => {
</NavLink> </NavLink>
</> </>
)} )}
<NavLink {!isVisitorMode && (
to="/explore"
id="header-explore"
className={({ isActive }) =>
classNames(
"px-4 pr-5 py-2 rounded-full border flex flex-row items-center text-lg text-gray-800 dark:text-gray-300 hover:bg-white hover:border-gray-200 dark:hover:border-zinc-600 dark:hover:bg-zinc-700",
isActive ? "bg-white dark:bg-zinc-700 border-gray-200 dark:border-zinc-600" : "border-transparent"
)
}
>
<> <>
<Icon.Hash className="mr-3 w-6 h-auto opacity-70" /> {t("common.explore")} <NavLink
to="/explore"
id="header-explore"
className={({ isActive }) =>
classNames(
"px-4 pr-5 py-2 rounded-full border flex flex-row items-center text-lg text-gray-800 dark:text-gray-300 hover:bg-white hover:border-gray-200 dark:hover:border-zinc-600 dark:hover:bg-zinc-700",
isActive ? "bg-white dark:bg-zinc-700 border-gray-200 dark:border-zinc-600" : "border-transparent"
)
}
>
<>
<Icon.Hash className="mr-3 w-6 h-auto opacity-70" /> {t("common.explore")}
</>
</NavLink>
</> </>
</NavLink> )}
{!isVisitorMode && ( {!isVisitorMode && (
<> <>

54
web/src/router/index.tsx
View File

@ -64,10 +64,14 @@ const router = createBrowserRouter([
} }
const { host, user } = store.getState().user; const { host, user } = store.getState().user;
const { systemStatus } = store.getState().global;
if (isNullorUndefined(host)) { if (isNullorUndefined(host)) {
return redirect("/auth"); return redirect("/auth");
} else if (isNullorUndefined(user)) { } else if (isNullorUndefined(user) && !systemStatus.disablePublicMemos) {
return redirect("/explore"); return redirect("/explore");
} else if (isNullorUndefined(user) && systemStatus.disablePublicMemos) {
return redirect("/auth");
} }
return null; return null;
}, },
@ -84,8 +88,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -103,8 +109,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -122,8 +130,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -141,8 +151,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -160,8 +172,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -180,8 +194,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -199,8 +215,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;
@ -220,8 +238,10 @@ const router = createBrowserRouter([
// do nth // do nth
} }
const { host } = store.getState().user; const { host, user } = store.getState().user;
if (isNullorUndefined(host)) { const { systemStatus } = store.getState().global;
if (isNullorUndefined(host) || (isNullorUndefined(user) && systemStatus.disablePublicMemos)) {
return redirect("/auth"); return redirect("/auth");
} }
return null; return null;