lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): Admin UI pages use OIDC session auth, API stays bearer token

Browse source
This commit is contained in:
Claus Lohmar 2026-06-14 14:54:50 +00:00
parent c89f823cb6
commit 3f2a7b81cf
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/main.go
View file

@ -122,11 +122,13 @@ func main() {
} }
uiHandler.RegisterRoutes(mux, combinedAuth) uiHandler.RegisterRoutes(mux, combinedAuth)
// --- Admin routes (protected by bearer token) --- // --- Admin API routes (JSON, protected by bearer token) ---
adminAuth := admin.TokenAuthMiddleware(cfg.Admin.SecretToken) adminAuth := admin.TokenAuthMiddleware(cfg.Admin.SecretToken)
adminHandler.RegisterRoutes(mux, adminAuth) adminHandler.RegisterRoutes(mux, adminAuth)
adminHandler.RegisterUIRoutes(mux, adminAuth)
adminHandler.RegisterHTMXRoutes(mux, adminAuth) // --- Admin UI routes (Templ-rendered HTML, protected by OIDC session) ---
adminHandler.RegisterUIRoutes(mux, combinedAuth)
adminHandler.RegisterHTMXRoutes(mux, combinedAuth)
// --- OIDC config page — shows Authelia status --- // --- OIDC config page — shows Authelia status ---
mux.HandleFunc("GET /auth/status", func(w http.ResponseWriter, r *http.Request) { mux.HandleFunc("GET /auth/status", func(w http.ResponseWriter, r *http.Request) {