szabodanika / microbin

A secure, configurable file-sharing and URL shortening web app written in Rust.
https://microbin.eu
BSD 3-Clause "New" or "Revised" License
2.66k stars 167 forks source link

Authenticate user while still following privacy settings #238

Open jl-678 opened 10 months ago

jl-678 commented 10 months ago

Describe the bug I am running Microbin publicly and want to set it up to allow me to create links and use all the privacy options while also providing user authentication to prevent random people from using my instance. I would expect that Microbin would allow me to authenticate myself as a user and then enable me to create public pastas.

User authentication locks down site access for everyone and effectively making my pastas inaccessible. So even when I create a public pasta, clicking on the link in an incognito tab brings me to my Micronin instance asking for username and password. As a result, it is not possible to create public pastas when user authentication is enabled. Is this expected behavior?

To Reproduce Steps to reproduce the behavior:

  1. Enable basic user admin and password
  2. Login to Microbin, create a public link and copy the link
  3. Open incognito and try to access the link from 2
  4. Result: You cannot access the pasta and instead are forced to login

Expected behavior Login should be required to create a pasta, but once created, the pasta should follow the "privacy" settings in Microbin. (e.g. You can login and create a public pasta and it will be publicly accessible to anyone with the URL.)