From 0d7a03f3e5d917f15d9603f568ae205778694580 Mon Sep 17 00:00:00 2001
From: DebaucheryLibrarian <moonloop.adult@protonmail.com>
Date: Tue, 16 Mar 2021 04:12:05 +0100
Subject: [PATCH] Allowing auth to be disabled in config.

---
 assets/components/auth/login.vue  |  7 +++++++
 assets/components/auth/signup.vue |  7 +++++++
 assets/components/header/menu.vue | 11 ++++++++---
 assets/js/auth/state.js           |  1 +
 config/default.js                 |  3 +++
 src/auth.js                       |  9 +++++++++
 src/web/server.js                 |  1 +
 7 files changed, 36 insertions(+), 3 deletions(-)

diff --git a/assets/components/auth/login.vue b/assets/components/auth/login.vue
index ab591440e..ec229609f 100644
--- a/assets/components/auth/login.vue
+++ b/assets/components/auth/login.vue
@@ -64,6 +64,12 @@ async function login() {
 	}
 }
 
+function mounted() {
+	if (!this.$store.state.auth.enabled) {
+		this.$router.replace({ name: 'not-found' });
+	}
+}
+
 export default {
 	data() {
 		return {
@@ -73,6 +79,7 @@ export default {
 			error: null,
 		};
 	},
+	mounted,
 	methods: {
 		login,
 	},
diff --git a/assets/components/auth/signup.vue b/assets/components/auth/signup.vue
index 97b46c248..f61bc8519 100644
--- a/assets/components/auth/signup.vue
+++ b/assets/components/auth/signup.vue
@@ -73,6 +73,12 @@ async function signup() {
 	}
 }
 
+function mounted() {
+	if (!this.$store.state.auth.enabled) {
+		this.$router.replace({ name: 'not-found' });
+	}
+}
+
 export default {
 	data() {
 		return {
@@ -83,6 +89,7 @@ export default {
 			error: null,
 		};
 	},
+	mounted,
 	methods: {
 		signup,
 	},
diff --git a/assets/components/header/menu.vue b/assets/components/header/menu.vue
index 4038f1039..f30ae4b46 100644
--- a/assets/components/header/menu.vue
+++ b/assets/components/header/menu.vue
@@ -2,13 +2,13 @@
 	<div class="menu">
 		<ul class="menu-items noselect">
 			<router-link
-				v-if="me"
+				v-if="auth && me"
 				:to="{ name: 'user', params: { username: me.username } }"
 				class="menu-username"
 			>{{ me.username }}</router-link>
 
 			<router-link
-				v-else
+				v-else-if="auth"
 				:to="{ name: 'login', query: { ref: $route.path } }"
 				class="menu-item"
 				@click.stop
@@ -17,7 +17,7 @@
 			</router-link>
 
 			<li
-				v-if="me"
+				v-if="auth && me"
 				class="menu-item"
 				@click.stop="$store.dispatch('logout')"
 			>
@@ -89,6 +89,10 @@ function theme(state) {
 	return state.ui.theme;
 }
 
+function auth(state) {
+	return state.auth.enabled;
+}
+
 function me(state) {
 	return state.auth.user;
 }
@@ -104,6 +108,7 @@ function setSfw(enabled) {
 export default {
 	computed: {
 		...mapState({
+			auth,
 			sfw,
 			theme,
 			me,
diff --git a/assets/js/auth/state.js b/assets/js/auth/state.js
index eeba6c854..9f461ad5b 100644
--- a/assets/js/auth/state.js
+++ b/assets/js/auth/state.js
@@ -1,3 +1,4 @@
 export default {
+	enabled: window.env.auth,
 	user: null,
 };
diff --git a/config/default.js b/config/default.js
index 3c1f9f597..e256cf238 100644
--- a/config/default.js
+++ b/config/default.js
@@ -33,6 +33,9 @@ module.exports = {
 		accessKey: 'ABCDEFGHIJ1234567890',
 		secretKey: 'abcdefghijklmnopqrstuvwxyz1234567890ABCD',
 	},
+	auth: {
+		enabled: true,
+	},
 	exclude: {
 		channels: [
 			// 21sextreme, no longer updated
diff --git a/src/auth.js b/src/auth.js
index aeaeb0ad0..021a7a26d 100644
--- a/src/auth.js
+++ b/src/auth.js
@@ -1,5 +1,6 @@
 'use strict';
 
+const config = require('config');
 const util = require('util');
 const crypto = require('crypto');
 
@@ -21,6 +22,10 @@ async function verifyPassword(password, storedPassword) {
 }
 
 async function login(credentials) {
+	if (!config.auth.enabled) {
+		throw new HttpError('Authentication is disabled', 405);
+	}
+
 	const user = await fetchUser(credentials.username, true);
 
 	if (!user) {
@@ -33,6 +38,10 @@ async function login(credentials) {
 }
 
 async function signup(credentials) {
+	if (!config.auth.enabled) {
+		throw new HttpError('Authentication is disabled', 405);
+	}
+
 	if (!credentials.username) {
 		throw new HttpError('Username required', 400);
 	}
diff --git a/src/web/server.js b/src/web/server.js
index 6e2e367bc..431b208ad 100644
--- a/src/web/server.js
+++ b/src/web/server.js
@@ -116,6 +116,7 @@ async function initServer() {
 		res.render(path.join(__dirname, '../../assets/index.ejs'), {
 			env: JSON.stringify({
 				sfw: !!req.headers.sfw || Object.prototype.hasOwnProperty.call(req.query, 'sfw'),
+				auth: config.auth.enabled,
 				sessionId: req.session.safeId,
 			}),
 		});