admin/changemaker.lite
1
0
Fork 0
Code Issues Packages Projects Releases 35 Wiki Activity

Some udpates to tracking user inputs. Still not happy with it but functional so moving on

Browse Source
This commit is contained in:
admin
2025-07-24 17:09:34 -06:00
parent bb7032d649
commit 3b7d382ad8
5 changed files with 71 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
map/app/middleware/auth.js
View File

@@ -1,7 +1,19 @@
const logger = require('../utils/logger');
const requireAuth = (req, res, next) => {
if (req.session && req.session.authenticated) {
// Check for both authentication patterns used in your app
const isAuthenticated = (req.session && req.session.authenticated) ||
(req.session && req.session.userId && req.session.userEmail);
if (isAuthenticated) {
next();
} else {
logger.warn('Unauthorized access attempt', {
ip: req.ip,
path: req.path,
userAgent: req.get('User-Agent')
});
if (req.xhr || req.headers.accept?.indexOf('json') > -1) {
res.status(401).json({
success: false,
@@ -14,9 +26,20 @@ const requireAuth = (req, res, next) => {
};
const requireAdmin = (req, res, next) => {
if (req.session && req.session.authenticated && req.session.isAdmin) {
// Check for both authentication patterns used in your app
const isAuthenticated = (req.session && req.session.authenticated) ||
(req.session && req.session.userId && req.session.userEmail);
if (isAuthenticated && req.session.isAdmin) {
next();
} else {
logger.warn('Unauthorized admin access attempt', {
ip: req.ip,
path: req.path,
user: req.session?.userEmail || 'anonymous',
userAgent: req.get('User-Agent')
});
if (req.xhr || req.headers.accept?.indexOf('json') > -1) {
res.status(403).json({
success: false,