sjs/vibetunnel
1
0
Fork 0
mirror of https://github.com/samsonjs/vibetunnel.git synced 2026-04-27 15:17:38 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

bypass localhost / route

Browse source
This commit is contained in:
Peter Steinberger 2025-06-24 03:46:16 +02:00
parent 17cffe7424
commit ef9a757608
2 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
web/src/server/routes/auth.ts
View file

@ -10,6 +10,7 @@ interface AuthRoutesConfig {
enableSSHKeys?: boolean;
disallowUserPassword?: boolean;
noAuth?: boolean;
allowLocalBypass?: boolean;
}
export function createAuthRoutes(config: AuthRoutesConfig): Router {
@ -174,10 +175,19 @@ export function createAuthRoutes(config: AuthRoutesConfig): Router {
*/
router.get('/config', (req, res) => {
try {
// Check if this is a local request and local bypass is enabled
const clientIp = req.ip || req.socket.remoteAddress || '';
const localIPs = ['127.0.0.1', '::1', '::ffff:127.0.0.1', 'localhost'];
const isLocalRequest =
localIPs.includes(clientIp) && !req.headers['x-forwarded-for'] && !req.headers['x-real-ip'];
// If local bypass is enabled and this is a local request, report as noAuth
const effectiveNoAuth = config.noAuth || (config.allowLocalBypass && isLocalRequest);
res.json({
enableSSHKeys: config.enableSSHKeys || false,
disallowUserPassword: config.disallowUserPassword || false,
noAuth: config.noAuth || false,
noAuth: effectiveNoAuth,
});
} catch (error) {
console.error('Error getting auth config:', error);

1
web/src/server/server.ts
View file

@ -479,6 +479,7 @@ export async function createApp(): Promise<AppInstance> {
enableSSHKeys: config.enableSSHKeys,
disallowUserPassword: config.disallowUserPassword,
noAuth: config.noAuth,
allowLocalBypass: config.allowLocalBypass,
})
);
logger.debug('Mounted authentication routes');