ZSCGR/KVideo
1
0
Fork 0
mirror of https://github.com/KuekHaoYang/KVideo.git synced 2026-08-15 00:33:44 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: read admin password at runtime on Cloudflare

Browse Source
This commit is contained in:
Codex
2026-07-20 16:13:51 +08:00
parent 68d4fd944d
commit 2a59e31cd4
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/server/auth.ts
+9 -5
View File
@@ -86,7 +86,9 @@ const DANMAKU_API_URL = process.env.DANMAKU_API_URL || process.env.NEXT_PUBLIC_D
const SESSION_MAX_AGE_SECONDS = 60 * 60 * 24 * 30;
const MANAGED_AUTH_FORCED = process.env.MANAGED_AUTH_ENABLED === 'true';
const effectiveAdminPassword = ADMIN_PASSWORD || ACCESS_PASSWORD;
function getEffectiveAdminPassword(): string {
return process.env.ADMIN_PASSWORD || process.env.ACCESS_PASSWORD || ADMIN_PASSWORD || ACCESS_PASSWORD;
}
let cachedRedis: Redis | null | undefined;
@@ -119,7 +121,7 @@ function isManagedAuthEnabled(): boolean {
}
function isLegacyAuthConfigured(): boolean {
return !!(effectiveAdminPassword || ACCOUNTS);
return !!(getEffectiveAdminPassword() || ACCOUNTS);
}
function isStoredAccountRecord(value: unknown): value is StoredAccountRecord {
@@ -174,6 +176,7 @@ async function saveManagedAccounts(accounts: StoredAccountRecord[]): Promise<voi
function getBootstrapSeeds(): SeedAccountInput[] {
const seeds: SeedAccountInput[] = [];
const usernames = new Set<string>();
const effectiveAdminPassword = getEffectiveAdminPassword();
if (effectiveAdminPassword) {
usernames.add('admin');
@@ -274,7 +277,7 @@ function resolveSessionSecret(loginMode: LoginMode): string | null {
}
if (loginMode === 'legacy_password' && isLegacyAuthConfigured()) {
return `legacy:${effectiveAdminPassword}:${ACCOUNTS}:${PREMIUM_PASSWORD}`;
return `legacy:${getEffectiveAdminPassword()}:${ACCOUNTS}:${PREMIUM_PASSWORD}`;
}
return null;
@@ -355,7 +358,7 @@ async function authenticateManagedLogin(username: string, password: string): Pro
const usesBootstrapAdminCredential = isBootstrapAdminCredential(
normalizedUsername,
password,
effectiveAdminPassword
getEffectiveAdminPassword()
);
if (!account) {
@@ -401,6 +404,7 @@ async function authenticateManagedLogin(username: string, password: string): Pro
async function authenticateLegacyLogin(password: string): Promise<ServerAuthSession | null> {
if (!password) return null;
const effectiveAdminPassword = getEffectiveAdminPassword();
if (effectiveAdminPassword && password === effectiveAdminPassword) {
return {
@@ -553,7 +557,7 @@ export async function listAccountInfo(): Promise<AccountInfo[]> {
const legacyAccounts: AccountInfo[] = [];
let index = 0;
if (effectiveAdminPassword) {
if (getEffectiveAdminPassword()) {
legacyAccounts.push({
id: 'legacy-admin',
username: 'admin',