diff options
author | Nicolas Dietrich | 2021-01-22 16:47:47 +0100 |
---|---|---|
committer | Nicolas Dietrich | 2021-01-22 16:52:49 +0100 |
commit | 497569fee4a841b13ed1606ca54f269162d3fa62 (patch) | |
tree | 3ad268aa959c51630cbc61a2b2fa73095585193b /lib/config/environment.js | |
parent | 3331c0947cb6d63ce7f2846c38d5a7b82960b2eb (diff) |
Add config option which requires authentication in FreeURL mode
This mitigates unintended note creation by bots or humans through a
simple GET call.
See discussion in #754.
Signed-off-by: Nicolas Dietrich <nidi@mailbox.org>
Diffstat (limited to 'lib/config/environment.js')
-rw-r--r-- | lib/config/environment.js | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/config/environment.js b/lib/config/environment.js index 2a2c5fbb..3f13c8e0 100644 --- a/lib/config/environment.js +++ b/lib/config/environment.js @@ -29,6 +29,7 @@ module.exports = { allowAnonymous: toBooleanConfig(process.env.CMD_ALLOW_ANONYMOUS), allowAnonymousEdits: toBooleanConfig(process.env.CMD_ALLOW_ANONYMOUS_EDITS), allowFreeURL: toBooleanConfig(process.env.CMD_ALLOW_FREEURL), + requireFreeURLAuthentication: toBooleanConfig(process.env.CMD_REQUIRE_FREEURL_AUTH), forbiddenNoteIDs: toArrayConfig(process.env.CMD_FORBIDDEN_NOTE_IDS), defaultPermission: process.env.CMD_DEFAULT_PERMISSION, dbURL: process.env.CMD_DB_URL, |