added auth for DEMO mode, because it is smart for security

vtfk · Sep 7, 2022 · c43e100 · c43e100
1 parent 633c44a
commit c43e100
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/lib/with-token-auth.js b/lib/with-token-auth.js
@@ -6,11 +6,6 @@ const HTTPError = require('./http-error')
 module.exports = async (context, request, next) => {
   logConfig({ azure: { context } })
 
-  if (DEMO) {
-    request.token = { upn: DEMO_USER, DEMO }
-    return next(context, request)
-  }
-
   const bearerToken = request.headers.authorization
   if (!bearerToken) {
     logger('warn', ['with-token-auth', request.url, 'no-authorization-header'])
@@ -22,6 +17,10 @@ module.exports = async (context, request, next) => {
     const validatedToken = await verify(token, TOKEN_AUTH)
     request.token = validatedToken
 
+    if (DEMO) {
+      request.token = { upn: DEMO_USER, DEMO }
+    }
+
     return next(context, request)
   } catch (error) {
     logger('warn', ['with-token-auth', request.url, 'invalid-token', error])