mirror of
https://github.com/thomiceli/opengist
synced 2024-11-08 12:55:50 +01:00
22052bd38f
* Add a setting to allow accessing individual gists without auth This is a middle ground between the existing setting "Require Login", which requires login to do anything at all, and having it off, which shows a public list of gists and more generally allows discovering info about the users/gists of the instance without login. The idea of this setting is that it is "require login" for everything except individual gists. Fixes #228. Co-authored-by: Thomas Miceli <tho.miceli@gmail.com>
19 lines
446 B
Go
19 lines
446 B
Go
package auth
|
|
|
|
type AuthInfoProvider interface {
|
|
RequireLogin() (bool, error)
|
|
AllowGistsWithoutLogin() (bool, error)
|
|
}
|
|
|
|
func ShouldAllowUnauthenticatedGistAccess(prov AuthInfoProvider, isSingleGistAccess bool) (bool, error) {
|
|
require, err := prov.RequireLogin()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
allow, err := prov.AllowGistsWithoutLogin()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return !require || (isSingleGistAccess && allow), nil
|
|
}
|