Comments (1)
Sorry, unfortunately something like that would require overhauling the session system altogether.
In short, there's really no easy workaround. At best, you can only do some kind of nginx IP-based rate limit on the files' location block. Though that'll only slow scrapers a bit, and can't really handle netbot scrapers with multiple of IP addresses.
For the technical explanation, this fork's session system rely solely on the visitors manually providing an auth token in each of their requests (this is automated by the frontend). As such, there is no "session cookie".
So even if you serve files with Node, to have the ability to programatically check for login status, it just can't. When browsers are fetching your files normally, the auth token won't be shipped in the requests, because it's not a cookie. So even programatically it's not possible to check login status.
On that note, I believe upstream chibisafe, https://github.com/chibisafe/chibisafe, already transitioned to using session cookie. So something like that should be possible with some modifications, if not right out of the box. I haven't checked their codes in a while, but Pitu/Kana, its author, is typically active on their Discord if you want to ask more.
from lolisafe.
Related Issues (20)
- migrating from chibisafe to lolisafe results in missing columns HOT 5
- Dependency Dashboard
- database from v4 chibisafe is not compatible with this fork
- How to access the API HOT 2
- Cannot access files uploaded to lolisafe HOT 4
- Error Code 0. HOT 5
- TypeError: Cannot read properties of undefined (reading 'hasher') HOT 9
- Add more upload size for certain groups. HOT 3
- sqlite3 CXXABI_1.3.8 not found error HOT 4
- Problem with the waveform HOT 4
- Docker Image building error HOT 2
- Are the files supposed to served on both domains? HOT 25
- Make usernames case-sensitive. HOT 1
- Audio and video not downloading/working properly HOT 17
- Reset password HOT 1
- Users get their own folder HOT 1
- Page not loading properly HOT 4
- Promote to superadmin HOT 2
- Chunked uploads fail when coming from IPv6 addresses HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lolisafe.