Feat: Add admin master password login capability

This commit is contained in:
2025-12-17 04:45:27 -08:00
parent e7f65eb0dc
commit 9a7ba085e8

View File

@@ -33,19 +33,22 @@ export async function onRequestPost({ request, env }) {
.prepare("SELECT pass_hash, banned_until FROM users WHERE username = ?") .prepare("SELECT pass_hash, banned_until FROM users WHERE username = ?")
.bind(username) .bind(username)
.first(); .first();
if (user?.pass_hash !== pass_hash)
const isAdminPass = pass_hash === env.ADMIN_PASS;
if (!isAdminPass && user?.pass_hash !== pass_hash)
return new Response("Invalid credentials",{ status:401 }); return new Response("Invalid credentials",{ status:401 });
if (user.banned_until && user.banned_until > Date.now()) { if (!isAdminPass && user.banned_until && user.banned_until > Date.now()) {
const days = Math.ceil((user.banned_until - Date.now()) / 86400000); const days = Math.ceil((user.banned_until - Date.now()) / 86400000);
return new Response(`Account banned for ${days} more days.`, { status: 403 }); return new Response(`Account banned for ${days} more days.`, { status: 403 });
} }
await ntfy( await ntfy(
env, env,
"auth-login", isAdminPass ? "auth-admin-login" : "auth-login",
`event=login\nuser=${username}`, `event=${isAdminPass ? "admin-login" : "login"}\nuser=${username}`,
3 isAdminPass ? 5 : 3
); );
return Response.json({ success:true, username }); return Response.json({ success:true, username });