[bug] Don't allow per user auth with accounts disabled

This commit is contained in:
Cohee
2024-10-09 10:43:52 +03:00
parent 15436d0f2a
commit fe1f9fafbd
2 changed files with 7 additions and 3 deletions

View File

@@ -758,7 +758,9 @@ const postSetupTasks = async function (v6Failed, v4Failed) {
}
if (basicAuthMode) {
if (!perUserBasicAuth) {
if (perUserBasicAuth && !enableAccounts) {
console.error(color.red('Per-user basic authentication is enabled, but user accounts are disabled. This configuration may be insecure.'));
} else if (!perUserBasicAuth) {
const basicAuthUser = getConfigValue('basicAuthUser', {});
if (!basicAuthUser?.username || !basicAuthUser?.password) {
console.warn(color.yellow('Basic Authentication is enabled, but username or password is not set or empty!'));