joachim/FileRise
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Save admin status in persistent token

Browse Source
This commit is contained in:
Ryan
2025-03-24 10:21:20 -04:00
committed by GitHub
parent 1d5c6a48b5
commit fc45767712
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -251,7 +251,7 @@ The `config.php` file contains several key constants that may need adjustment fo
Defines the maximum upload size (default is `5G`). Ensure that PHP’s `upload_max_filesize` and `post_max_size` in your `php.ini` are consistent with this setting. The startup script (`start.sh`) updates PHP limits at runtime based on this value. Defines the maximum upload size (default is `5G`). Ensure that PHP’s `upload_max_filesize` and `post_max_size` in your `php.ini` are consistent with this setting. The startup script (`start.sh`) updates PHP limits at runtime based on this value.
- **Environment Variables (Docker):** - **Environment Variables (Docker):**
The Docker image supports overriding configuration via environment variables. For example, you can set `SECURE`, `SHARE_URL`, and port settings via the container’s environment. The Docker image supports overriding configuration via environment variables. For example, you can set `SECURE`, `SHARE_URL`, `PERSISTENT_TOKENS_KEY` and port settings via the container’s environment.
--- ---

5
auth.php
View File

@@ -110,10 +110,11 @@ if ($userRole !== false) {
$persistentTokens = []; $persistentTokens = [];
} }
} }
// Save token along with username and expiry. // Save token along with username, expiry, and admin status.
$persistentTokens[$token] = [ $persistentTokens[$token] = [
"username" => $username, "username" => $username,
"expiry" => $expiry "expiry" => $expiry,
"isAdmin" => ($userRole === "1")
]; ];
$encryptedContent = encryptData(json_encode($persistentTokens, JSON_PRETTY_PRINT), $encryptionKey); $encryptedContent = encryptData(json_encode($persistentTokens, JSON_PRETTY_PRINT), $encryptionKey);
file_put_contents($persistentTokensFile, $encryptedContent, LOCK_EX); file_put_contents($persistentTokensFile, $encryptedContent, LOCK_EX);

3
config.php
View File

@@ -97,8 +97,7 @@ if (!isset($_SESSION["authenticated"]) && isset($_COOKIE['remember_me_token']))
// Token is valid; auto-authenticate the user. // Token is valid; auto-authenticate the user.
$_SESSION["authenticated"] = true; $_SESSION["authenticated"] = true;
$_SESSION["username"] = $tokenData["username"]; $_SESSION["username"] = $tokenData["username"];
// Optionally, set admin status if stored in token data: $_SESSION["isAdmin"] = $tokenData["isAdmin"]; // Restore admin status from the token
// $_SESSION["isAdmin"] = $tokenData["isAdmin"];
} else { } else {
// Token expired; remove it and clear the cookie. // Token expired; remove it and clear the cookie.
unset($persistentTokens[$_COOKIE['remember_me_token']]); unset($persistentTokens[$_COOKIE['remember_me_token']]);