github
/
alist
mirror of https://github.com/Xhofe/alist
1
0
Fork 0
Code Issues Releases Wiki Activity

feat: allow use token to access `WebDAV`

pull/4964/head
Andy Hsu 2023-08-07 14:20:17 +08:00
parent 5b6b2f427a
commit ff5cf3f4fa
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
server/webdav.go
View File

@ -2,12 +2,15 @@ package server
import ( import (
"context" "context"
"crypto/subtle"
"net/http" "net/http"
"path" "path"
"strings"
"github.com/alist-org/alist/v3/internal/conf" "github.com/alist-org/alist/v3/internal/conf"
"github.com/alist-org/alist/v3/internal/model" "github.com/alist-org/alist/v3/internal/model"
"github.com/alist-org/alist/v3/internal/op" "github.com/alist-org/alist/v3/internal/op"
"github.com/alist-org/alist/v3/internal/setting"
"github.com/alist-org/alist/v3/pkg/utils" "github.com/alist-org/alist/v3/pkg/utils"
"github.com/alist-org/alist/v3/server/webdav" "github.com/alist-org/alist/v3/server/webdav"
"github.com/gin-gonic/gin" "github.com/gin-gonic/gin"
@ -47,6 +50,23 @@ func WebDAVAuth(c *gin.Context) {
guest, _ := op.GetGuest() guest, _ := op.GetGuest()
username, password, ok := c.Request.BasicAuth() username, password, ok := c.Request.BasicAuth()
if !ok { if !ok {
bt := c.GetHeader("Authorization")
if strings.HasPrefix(bt, "Bearer") {
bt = strings.TrimPrefix(bt, "Bearer ")
token := setting.GetStr(conf.Token)
if token != "" && subtle.ConstantTimeCompare([]byte(bt), []byte(token)) == 1 {
admin, err := op.GetAdmin()
if err != nil {
log.Errorf("[webdav auth] failed get admin user: %+v", err)
c.Status(http.StatusInternalServerError)
c.Abort()
return
}
c.Set("user", admin)
c.Next()
return
}
}
if c.Request.Method == "OPTIONS" { if c.Request.Method == "OPTIONS" {
c.Set("user", guest) c.Set("user", guest)
c.Next() c.Next()