Disable privileged access on blank accessKey

Affirmatech · Oct 9, 2024 · 62c4723 · 62c4723
1 parent aca639c
commit 62c4723
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/api/src/vars.ts b/api/src/vars.ts
@@ -11,7 +11,7 @@ export let currentTime = new State<number>('currentTime', Date.now(), { hideLog:
 export let myNodeNum = new State<number>('myNodeNum')
 export let broadcastId = 4294967295
 export let myNodeMetadata = new State<DeviceMetadata>('myNodeMetadata')
-export let accessKey = new State<string>('accessKey', 'secret', { persist: true, hideLog: true })
+export let accessKey = new State<string>('accessKey', undefined, { persist: true, hideLog: true })
 export let packetLimit = new State<number>('packetLimit', 500, { persist: true })
 export let apiHostname = new State<string>('apiHostname', undefined, { hideLog: true })
 export let apiPort = new State<string>('apiPort', undefined, { hideLog: true })

diff --git a/ui/src/lib/util.ts b/ui/src/lib/util.ts
@@ -5,7 +5,7 @@ import { enableAudioAlerts } from '../Settings.svelte'
 
 export const userKey = writable(localStorage.getItem('userKey') || '')
 userKey.subscribe((value) => localStorage.setItem('userKey', value))
-export const hasAccess = derived([accessKey, userKey], ([$accessKey, $userKey]) => window.location.hostname == 'localhost' || !$accessKey || $accessKey == $userKey)
+export const hasAccess = derived([accessKey, userKey], ([$accessKey, $userKey]) => window.location.hostname == 'localhost' || ($accessKey != '' && $accessKey == $userKey))
 window['userKey'] = userKey
 
 export function unixSecondsTimeAgo(seconds) {