Don't allow empty tokens (#13)

adamshiervani · web-flow · commit e445039cb814 · 2025-01-02T21:44:26.000+01:00
diff --git a/web.go b/web.go
@@ -192,7 +192,7 @@ func protectedMiddleware() gin.HandlerFunc {
 		}
 
 		authToken, err := c.Cookie("authToken")
-		if err != nil || authToken != config.LocalAuthToken {
+		if err != nil || authToken != config.LocalAuthToken || authToken == "" {
 			c.JSON(http.StatusUnauthorized, gin.H{"error": "Unauthorized"})
 			c.Abort()
 			return

Original file line number	Diff line number	Diff line change
`@@ -192,7 +192,7 @@ func protectedMiddleware() gin.HandlerFunc {`
`192`	`192`	`}`
`193`	`193`
`194`	`194`	`authToken, err := c.Cookie("authToken")`
`195`		`- if err != nil \|\| authToken != config.LocalAuthToken {`
	`195`	`+ if err != nil \|\| authToken != config.LocalAuthToken \|\| authToken == "" {`
`196`	`196`	`c.JSON(http.StatusUnauthorized, gin.H{"error": "Unauthorized"})`
`197`	`197`	`c.Abort()`
`198`	`198`	`return`