@cloudron/tegel 1.0.1 → 1.1.0

package/index.js

@@ -9,12 +9,17 @@ export async function createExpressApp({ sessionSecret = 'changeme', oidcConfig
 
   const app = express();
 
-  app.set('trust proxy', 1);
+  app.set('trust proxy', true);
+  app.set('json spaces', 2);
+  app.set('query parser', 'simple');
 
   app.use(express.json());
 
+  const FileStore = require('session-file-store')(session);
+
   app.use(session({
     secret: sessionSecret,
+    store: new FileStore({ path: process.env.CLOUDRON ? '/app/data/.session.store' : '/tmp/session.store' }),
     resave: false,
     saveUninitialized: false,
     cookie: {
@@ -113,8 +118,8 @@ export function logout(redirectTo) {
   };
 }
 
-export function requireAuth(redirectTo) {
-  if (!redirectTo || typeof redirectTo !== 'string') throw new Error('requireAuth needs a redirectTo path as non-empty string');
+export function requireAuth(redirectTo = '') {
+  if (typeof redirectTo !== 'string') throw new Error('requireAuth needs a redirectTo path as non-empty string');
 
   return (req, res, next) => {
     if (req.session && req.session.user) {
@@ -122,6 +127,8 @@ export function requireAuth(redirectTo) {
       return next();
     }
 
+    if (!redirectTo) return next(new HttpError(401, 'Unauthorized'));
+
     res.redirect(redirectTo);
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudron/tegel",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "",
   "license": "GPL-2.0",
   "author": "Cloudron Developers",
@@ -20,6 +20,6 @@
   "devDependencies": {
     "@eslint/js": "^9.39.2",
     "eslint": "^9.39.2",
-    "globals": "^17.1.0"
+    "globals": "^17.3.0"
   }
 }