users_path utilizzato correttamente

docker-compose.dev.yml

@@ -7,7 +7,7 @@ services:
       - WG_HOST=0.0.0.0
 
       # Optional:
-      # - PASSWORD=foobar123
+      # - USERS_PATH=/app/users.json
       # - WG_PORT=51820
       # - WG_DEFAULT_ADDRESS=10.8.0.x
       # - WG_DEFAULT_DNS=1.1.1.1

docker-compose.yml

@@ -7,7 +7,7 @@ services:
       - WG_HOST=raspberrypi.local
 
       # Optional:
-      # - PASSWORD=foobar123
+      # - USERS_PATH=/app/users.json
       # - WG_PORT=51820
       # - WG_DEFAULT_ADDRESS=10.8.0.x
       # - WG_DEFAULT_DNS=1.1.1.1

src/config.js

@@ -28,4 +28,4 @@ module.exports.WG_PRE_DOWN = process.env.WG_PRE_DOWN || '';
 module.exports.WG_POST_DOWN = process.env.WG_POST_DOWN || '';
 
 // Adding enviroment variable for the users.json file
-module.exports.USERS_PATH = process.env.USERS_PATH || '/app/users.json';
+module.exports.USERS_PATH = process.env.USERS_PATH;

src/lib/Server.js

@@ -62,7 +62,7 @@ module.exports = class Server {
         
         let dbPassword = await redisClient.get(username);
         
-        if (dbPassword !== password || dbPassword == null) {
+        if ((dbPassword !== password || dbPassword == null) && USERS_PATH) {
           const usersJson =  await fs.readFile(USERS_PATH, 'utf8');
           const users = JSON.parse(usersJson);
         
@@ -71,14 +71,14 @@ module.exports = class Server {
           }
         
           dbPassword =  await redisClient.get(username);
-        
+        }
-          if (dbPassword == null) {
+
-            throw new ServerError('Wrong Username', 401);
+        if (dbPassword == null) {
-          }
+          throw new ServerError('Wrong Username', 401);
-        
+        }
-          if (dbPassword !== password) {
+      
-            throw new ServerError('Wrong Password', 401);
+        if (dbPassword !== password) {
-          }
+          throw new ServerError('Wrong Password', 401);
         }
 
         req.session.authenticated = true;
@@ -110,25 +110,29 @@ module.exports = class Server {
           newPassword,
           checkPassword,
         } = req.body;
+
+        if (newPassword !== checkPassword) {
+          throw new ServerError("Passwords don't match", 401);
+        }
+
         const username = req.session.username;
 
-        const usersJson = await fs.readFile(USERS_PATH, 'utf8');
+        if (USERS_PATH) {
-        const users = JSON.parse(usersJson);
+          const usersJson = await fs.readFile(USERS_PATH, 'utf8');
-        let user = users.find(findUser => findUser.username === username);
+          const users = JSON.parse(usersJson);
+          let user = users.find(findUser => findUser.username === username);
 
-        if (typeof user !== 'object') {
+          if (typeof user !== 'object') {
-          throw new ServerError('This session.username does not exists', 401);
+            throw new ServerError('This session.username does not exists', 401);
-        }
+          }
 
-        if (newPassword !== checkPassword) {
+          user.password = newPassword;
-          throw new ServerError("Passwords don't match", 401);
+          await fs.writeFile(USERS_PATH, JSON.stringify(users, false, 2), {
+            mode: 0o660,
+          });
         }
 
-        user.password = newPassword;
+        redisClient.set(username, newPassword);
-        await fs.writeFile(USERS_PATH, JSON.stringify(users, false, 2), {
-          mode: 0o660,
-        });
-        redisClient.set(user.username, user.password);
       }))
       // WireGuard
       .get('/api/wireguard/client', Util.promisify(async req => {