Marbes/Luncher
6
2
Fork 0
Code Issues 22 Pull Requests Packages Projects Releases Wiki Activity

detekce stareho menu u toweru #52

Merged
mates merged 3 commits from upravy into master 2026-03-06 09:34:25 +01:00
Conversation 0 Commits 3 Files Changed 6 +16 -5
2 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 607bcd9bf5 - Show all commits

6
server/.env.template
View File

@@ -43,4 +43,8 @@
# Vygenerovat pomocí: npx web-push generate-vapid-keys # Vygenerovat pomocí: npx web-push generate-vapid-keys
# VAPID_PUBLIC_KEY= # VAPID_PUBLIC_KEY=
# VAPID_PRIVATE_KEY= # VAPID_PRIVATE_KEY=
# VAPID_SUBJECT=mailto:admin@example.com # VAPID_SUBJECT=mailto:admin@example.com
# Heslo pro bypass rate limitu na endpointu /api/food/refresh (pro skripty/admin).
# Bez hesla může refresh volat každý přihlášený uživatel (podléhá rate limitu).
# REFRESH_BYPASS_PASSWORD=

15
server/src/routes/foodRoutes.ts
View File

@@ -191,13 +191,20 @@ router.post("/updateBuyer", async (req, res, next) => {
} catch (e: any) { next(e) } } catch (e: any) { next(e) }
}); });
// /api/food/refresh?type=week&heslo=docasnyheslo // /api/food/refresh?type=week (přihlášený uživatel, nebo ?heslo=... pro bypass rate limitu)
export const refreshMetoda = async (req: Request, res: Response) => { export const refreshMetoda = async (req: Request, res: Response) => {
const { type, heslo } = req.query as { type?: string; heslo?: string }; const { type, heslo } = req.query as { type?: string; heslo?: string };
if (heslo !== "docasnyheslo" && heslo !== "tohleheslopavelnesmizjistit123") { const bypassPassword = process.env.REFRESH_BYPASS_PASSWORD;
return res.status(403).json({ error: "Neplatné heslo" }); const isBypass = !!bypassPassword && heslo === bypassPassword;
if (!isBypass) {
try {
getLogin(parseToken(req));
} catch {
return res.status(403).json({ error: "Přihlaste se prosím" });
}
} }
if (!checkRateLimit("refresh") && heslo !== "tohleheslopavelnesmizjistit123") { if (!checkRateLimit("refresh") && !isBypass) {
return res.status(429).json({ error: "Refresh už se zavolal, chvíli počkej :))" }); return res.status(429).json({ error: "Refresh už se zavolal, chvíli počkej :))" });
} }
if (type !== "week" && type !== "day") { if (type !== "week" && type !== "day") {