nezumi/9router
1
0
Fork 0
mirror of https://github.com/Nezumi-2711/9router.git synced 2026-09-22 13:38:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enhance security

Browse Source
This commit is contained in:
decolua
2026-05-21 11:33:18 +07:00
parent e3cab135ef
commit 026a7c9b85
6 changed files with 173 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/dashboardGuard.js
+2 -2
View File
@@ -125,8 +125,8 @@ async function canAccessPublicLlmApi(request) {
async function canAccessLocalOnlyRoute(request) {
if (await hasValidCliToken(request)) return true;
// Browser on host: loopback Host + Origin (blocks tunnel/CSRF) + JWT cookie (blocks unauth raw clients)
if (isLocalRequest(request) && await hasValidToken(request)) return true;
// Browser on host: loopback Host + Origin (blocks tunnel/CSRF) + auth (JWT or requireLogin=false)
if (isLocalRequest(request) && await isAuthenticated(request)) return true;
return false;
}