auth/login should return empty object when insecure

This commit is contained in:
Nick O'Leary
2015-03-25 20:32:40 +00:00
parent fcc6943f98
commit 2a57d0b6d0
4 changed files with 26 additions and 10 deletions

View File

@@ -51,6 +51,8 @@ function init(adminApp,storage) {
adminApp.use(express.json());
adminApp.use(express.urlencoded());
adminApp.get("/auth/login",auth.login);
if (settings.adminAuth) {
//TODO: all passport references ought to be in ./auth
@@ -61,7 +63,6 @@ function init(adminApp,storage) {
auth.getToken,
auth.errorHandler
);
adminApp.get("/auth/login",auth.login);
adminApp.post("/auth/revoke",auth.revoke);
}