From f539e3c8d8685b0933a87d061cef95c8eb38675c Mon Sep 17 00:00:00 2001 From: Joel Savitz Date: Thu, 11 Apr 2024 16:17:31 -0400 Subject: [PATCH] orbit: require authentication to access cgit A nice little two line fix. Fixes #68 Signed-off-by: Joel Savitz --- orbit/radius.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/orbit/radius.py b/orbit/radius.py index 33e3d851..785c8428 100644 --- a/orbit/radius.py +++ b/orbit/radius.py @@ -474,6 +474,8 @@ def form_respond(): def handle_cgit(rocket): + if not rocket.session: + return rocket.raw_respond(HTTPStatus.UNAUTHORIZED) cgit_env = os.environ.copy() cgit_env['PATH_INFO'] = rocket.path_info.removeprefix('/cgit') cgit_env['QUERY_STRING'] = rocket.env.get('QUERY_STRING', '')