From 26471517a98e083e88d0437e6fbce6108ba8f2a0 Mon Sep 17 00:00:00 2001
From: michael-pattern <michael@patternresearch.net>
Date: Wed, 8 May 2024 17:52:05 -0400
Subject: [PATCH] Only add users to basicAuth when password is truthy

---
 packages/api/src/main.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/api/src/main.js b/packages/api/src/main.js
index d9d81c61f..6b97431ce 100644
--- a/packages/api/src/main.js
+++ b/packages/api/src/main.js
@@ -48,7 +48,7 @@ function start() {
   if (logins && process.env.BASIC_AUTH) {
     app.use(
       basicAuth({
-        users: _.fromPairs(logins.map(x => [x.login, x.password])),
+        users: _.fromPairs(logins.filter(x => x.password).map(x => [x.login, x.password])),
         challenge: true,
         realm: 'DbGate Web App',
       })