tarcourt/snek
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow / and /static/ paths without token so login page can load

Browse Source
This commit is contained in:
gitomarcourt
2026-07-03 18:30:14 +02:00
parent 16a2429f88
commit f92d2bb642
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dashboard/app.py
+5 -2
View File
@@ -16,14 +16,17 @@ DB_PATH = os.environ.get("DB_PATH", "/data/messages.db")
Path(DB_PATH).parent.mkdir(parents=True, exist_ok=True) Path(DB_PATH).parent.mkdir(parents=True, exist_ok=True)
TOKEN = os.environ.get("DASHBOARD_TOKEN", "").strip() TOKEN = os.environ.get("DASHBOARD_TOKEN", "").strip()
PUBLIC_ROUTES = {"/webhook", "/healthz"} # Public: HTML shell + static assets (login page needs to load) + webhook + health
PUBLIC_ROUTES = {"/", "/webhook", "/healthz"}
PUBLIC_PREFIXES = ("/static/",)
app = Flask(__name__, static_folder="static", static_url_path="/static") app = Flask(__name__, static_folder="static", static_url_path="/static")
@app.before_request @app.before_request
def _check_token(): def _check_token():
if not TOKEN or request.path in PUBLIC_ROUTES: p = request.path
if not TOKEN or p in PUBLIC_ROUTES or p.startswith(PUBLIC_PREFIXES):
return None return None
supplied = ( supplied = (
request.headers.get("Authorization", "").removeprefix("Bearer ").strip() request.headers.get("Authorization", "").removeprefix("Bearer ").strip()