mirror of
https://github.com/zadam/trilium.git
synced 2025-11-01 02:45:54 +01:00
added document_secret as basis for API authentication
This commit is contained in:
12
app.js
12
app.js
@@ -7,7 +7,9 @@ const helmet = require('helmet');
|
||||
const session = require('express-session');
|
||||
const FileStore = require('session-file-store')(session);
|
||||
const os = require('os');
|
||||
const sql = require('./services/sql');
|
||||
const log = require('./services/log');
|
||||
const utils = require('./services/utils');
|
||||
|
||||
const indexRoute = require('./routes/index');
|
||||
const loginRoute = require('./routes/login');
|
||||
@@ -33,7 +35,15 @@ const db = require('sqlite');
|
||||
|
||||
const config = require('./services/config');
|
||||
|
||||
db.open(dataDir.DOCUMENT_PATH, { Promise });
|
||||
db.open(dataDir.DOCUMENT_PATH, { Promise }).then(async () => {
|
||||
if (!await sql.getOption('document_id')) {
|
||||
await sql.setOption('document_id', utils.randomString(32));
|
||||
}
|
||||
|
||||
if (!await sql.getOption('document_secret')) {
|
||||
await sql.setOption('document_secret', utils.randomSecureToken(32));
|
||||
}
|
||||
});
|
||||
|
||||
const app = express();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user