home-hosted 0.7.6 → 0.7.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.js CHANGED
@@ -2437,6 +2437,11 @@ function createAuthRoute(deps) {
2437
2437
  statusCode: 400,
2438
2438
  code: "EXPOSED_WITHOUT_PASSWORD"
2439
2439
  });
2440
+ const proxyExposure = checkProxyExposure(deps.proxy.config, false, false, false);
2441
+ if (proxyExposure !== null) throw new DetailedError(proxyExposure, {
2442
+ statusCode: 400,
2443
+ code: "PROXY_EXPOSURE_BLOCKED"
2444
+ });
2440
2445
  deps.auth.clearPassword();
2441
2446
  deps.panel.settings.updateControl({ auth: { enabled: false } });
2442
2447
  return c.json({ ok: true });
@@ -9736,6 +9741,11 @@ function createSettingsRoute(deps) {
9736
9741
  statusCode: 400,
9737
9742
  code: "EXPOSURE_BLOCKED"
9738
9743
  });
9744
+ const proxyExposure = checkProxyExposure(deps.proxy.config, patch.control?.auth?.enabled ?? current.auth.enabled, deps.auth.passwordSet, deps.auth.usingDefaultPassword);
9745
+ if (proxyExposure !== null) throw new DetailedError(proxyExposure, {
9746
+ statusCode: 400,
9747
+ code: "PROXY_EXPOSURE_BLOCKED"
9748
+ });
9739
9749
  const previous = {
9740
9750
  trustProxy: current.auth.trustProxy,
9741
9751
  tlsEnabled: current.tls.enabled