mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-08-04 14:57:42 +00:00
73c43ded25
* 🔒 fix: Enforce ALLOW_EMAIL_LOGIN on Backend Login Route
ALLOW_EMAIL_LOGIN=false previously only hid the login form; POST
/api/auth/login stayed mounted and accepted valid credentials. Add a
validateEmailLogin middleware (mirroring validateRegistration /
validatePasswordReset) that rejects login with 403 when the flag is
disabled, with an ALLOW_EMAIL_LOGIN_OVERRIDE escape hatch for
intentional direct API login (each use logged with request IP).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix: Gate admin local login by email login flag
* fix: Move email login gate into api package
* test: Avoid mutating readonly request ip
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Danny Avila <danny@librechat.ai>
58 lines
2 KiB
JavaScript
58 lines
2 KiB
JavaScript
const validatePasswordReset = require('./validatePasswordReset');
|
|
const setTwoFactorTempUser = require('./setTwoFactorTempUser');
|
|
const validateRegistration = require('./validateRegistration');
|
|
const buildEndpointOption = require('./buildEndpointOption');
|
|
const validateEmailLogin = require('./validateEmailLogin');
|
|
const validateMessageReq = require('./validateMessageReq');
|
|
const { prepareMessageRequestValidation, sendValidationResponse } = require('./messageValidation');
|
|
const checkDomainAllowed = require('./checkDomainAllowed');
|
|
const requireLocalAuth = require('./requireLocalAuth');
|
|
const canDeleteAccount = require('./canDeleteAccount');
|
|
const accessResources = require('./accessResources');
|
|
const requireLdapAuth = require('./requireLdapAuth');
|
|
const abortMiddleware = require('./abortMiddleware');
|
|
const checkInviteUser = require('./checkInviteUser');
|
|
const requireJwtAuth = require('./requireJwtAuth');
|
|
const { requireRumProxyAuth } = require('./requireJwtAuth');
|
|
const configMiddleware = require('./config/app');
|
|
const validateModel = require('./validateModel');
|
|
const moderateText = require('./moderateText');
|
|
const logHeaders = require('./logHeaders');
|
|
const setHeaders = require('./setHeaders');
|
|
const validate = require('./validate');
|
|
const limiters = require('./limiters');
|
|
const uaParser = require('./uaParser');
|
|
const checkBan = require('./checkBan');
|
|
const noIndex = require('./noIndex');
|
|
const roles = require('./roles');
|
|
|
|
module.exports = {
|
|
...abortMiddleware,
|
|
...validate,
|
|
...limiters,
|
|
...roles,
|
|
...accessResources,
|
|
noIndex,
|
|
checkBan,
|
|
uaParser,
|
|
setHeaders,
|
|
logHeaders,
|
|
moderateText,
|
|
validateModel,
|
|
requireJwtAuth,
|
|
requireRumProxyAuth,
|
|
setTwoFactorTempUser,
|
|
checkInviteUser,
|
|
requireLdapAuth,
|
|
requireLocalAuth,
|
|
canDeleteAccount,
|
|
configMiddleware,
|
|
checkDomainAllowed,
|
|
validateMessageReq,
|
|
sendValidationResponse,
|
|
prepareMessageRequestValidation,
|
|
buildEndpointOption,
|
|
validateRegistration,
|
|
validatePasswordReset,
|
|
validateEmailLogin,
|
|
};
|