mirrors/navidrome
1
0
Fork 0
mirror of https://github.com/navidrome/navidrome.git synced 2025-04-04 13:07:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

Only allow Admins to login to the UI (for now)

Browse source
This commit is contained in:
Deluan 2020-01-20 13:52:55 -05:00
parent 43b0a9dadd
commit 4e8cb5ffef
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
server/app/auth.go
View file

@ -72,6 +72,10 @@ func validateLogin(userRepo model.UserRepository, userName, password string) (*m
if u.Password != password { if u.Password != password {
return nil, nil return nil, nil
} }
if !u.IsAdmin {
log.Warn("Non-admin user tried to login", "user", userName)
return nil, nil
}
err = userRepo.UpdateLastLoginAt(u.ID) err = userRepo.UpdateLastLoginAt(u.ID)
if err != nil { if err != nil {
log.Error("Could not update LastLoginAt", "user", userName) log.Error("Could not update LastLoginAt", "user", userName)