feat: add basic auth protection to CMS editor

2026-04-27 01:11:51 +02:00
parent c02017e30f
commit 649724de11
1 changed files with 13 additions and 0 deletions
@@ -356,7 +356,20 @@ if (toast) setTimeout(() => toast.remove(), 3500);

 // ── Server ───────────────────────────────────────────────────────────────────

+const CMS_USER = process.env.CMS_USER || 'admin';
+const CMS_PASS = process.env.CMS_PASS || 'mozdit2026';
+
 const server = http.createServer(async (req, res) => {
+  // Basic Auth verification
+  const b64auth = (req.headers.authorization || '').split(' ')[1] || '';
+  const [login, password] = Buffer.from(b64auth, 'base64').toString().split(':');
+
+  if (login !== CMS_USER || password !== CMS_PASS) {
+    res.writeHead(401, { 'WWW-Authenticate': 'Basic realm="mozdIT CMS"' });
+    res.end('Access denied');
+    return;
+  }
+
  const u = new URL(req.url, `http://localhost:${PORT}`);
  const fileKey = u.searchParams.get('file') || 'home';
  const activeFile = FILES[fileKey] ? fileKey : 'home';