Bypass authentication for non-mobiscroll packages (temporary)

acidb · Sep 22, 2023 · 215210c · 215210c
1 parent 499f40a
commit 215210c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/lib/auth.js b/src/lib/auth.js
@@ -238,6 +238,12 @@ class Auth implements IAuth {
       const user: string = credentials.slice(0, index);
       const pass: string = credentials.slice(index + 1);
 
+      // Bypass authentication in case of other npm packages (temporary solution)
+      const pathname = (req._parsedUrl || {}).pathname;
+      if (!/@mobiscroll/.test(pathname) && !/^\/\-\//.test(pathname)) {
+        return next();
+      }
+
       this.authenticate(user, pass, function(err, user) {
         if (!err) {
           req.remote_user = user;