From bf8407274e3ee300af1927ee660d078a7a801e1c Mon Sep 17 00:00:00 2001
From: mikiher <mikiher@gmail.com>
Date: Sun, 3 Nov 2024 08:45:43 +0200
Subject: [PATCH] No auth for author images

---
 server/Auth.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/Auth.js b/server/Auth.js
index da124b72..5b2d8bcd 100644
--- a/server/Auth.js
+++ b/server/Auth.js
@@ -18,7 +18,7 @@ class Auth {
   constructor() {
     // Map of openId sessions indexed by oauth2 state-variable
     this.openIdAuthSession = new Map()
-    this.ignorePattern = /\/api\/items\/[^/]+\/cover/
+    this.ignorePatterns = [/\/api\/items\/[^/]+\/cover/, /\/api\/authors\/[^/]+\/image/]
   }
 
   /**
@@ -28,7 +28,7 @@ class Auth {
    * @private
    */
   authNotNeeded(req) {
-    return req.method === 'GET' && this.ignorePattern.test(req.originalUrl)
+    return req.method === 'GET' && this.ignorePatterns.some((pattern) => pattern.test(req.originalUrl))
   }
 
   ifAuthNeeded(middleware) {