Use LOGIN_PERMISSIONS_* to compile permissions directly instead of creating logins. Accept req.user.login in hasPermission

This commit is contained in:
michael-pattern
2024-05-17 10:59:20 -04:00
parent cb9921918f
commit 4214b4f613

View File

@@ -9,7 +9,8 @@ function hasPermission(tested, req) {
return true; return true;
} }
const { user } = (req && req.auth) || {}; const { user } = (req && req.auth) || {};
const key = user || ''; const { login } = (process.env.OAUTH_PERMISSIONS && req && req.user) || {};
const key = user || login || '';
const logins = getLogins(); const logins = getLogins();
if (!userPermissions[key]) { if (!userPermissions[key]) {
@@ -58,11 +59,7 @@ function getLogins() {
for (const permissions_key of login_permission_keys) { for (const permissions_key of login_permission_keys) {
const login = permissions_key.replace('LOGIN_PERMISSIONS_', ''); const login = permissions_key.replace('LOGIN_PERMISSIONS_', '');
const permissions = process.env[permissions_key]; const permissions = process.env[permissions_key];
res.push({ userPermissions[login] = compilePermissions(permissions);
login,
password: null,
permissions,
})
} }
} }