edshot99/eBooru
1
0
Fork 0
forked from e621ng/e621ng
Code Issues 11 Releases 1 Activity

Fix sidekiq route security

Browse Source
This commit is contained in:
Kira 2019-10-05 02:20:23 -07:00
parent 709eae7abd
commit a2f97acfdc
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
app/logical/admin_route_constraint.rb Normal file
View File

@ -0,0 +1,7 @@
class AdminRouteConstraint
def matches?(request)
return false unless request.session[:user_id]
user = User.find(request.session[:user_id])
user && user.is_admin?
end
end

3
config/routes.rb
View File

@ -2,8 +2,9 @@ Rails.application.routes.draw do
require 'sidekiq/web'
require 'sidekiq_unique_jobs/web'
Sidekiq::Web.set :session_secret, Rails.application.credentials[:secret_key_base]
mount Sidekiq::Web => '/sidekiq'
mount Sidekiq::Web => '/sidekiq', constraints: AdminRouteConstraint.new
namespace :admin do
resources :users, :only => [:edit, :update, :edit_blacklist, :update_blacklist] do