Exclude /status, /metrics from session middleware

Because of seemingly undocumented changes in passport 0.5.0,
passport now crashes on requests to paths without session data.

This removes the session middleware from /status and /metrics, which are
 excluded from sessions since 90c5ab0833.

 Fixes https://github.com/hedgedoc/container/issues/270

Signed-off-by: David Mehren <git@herrmehren.de>
This commit is contained in:
David Mehren 2021-12-03 10:30:57 +01:00
parent ece1bb8d56
commit 9d8f33014a
No known key found for this signature in database
GPG key ID: 185982BA4C42B7C3

2
app.js
View file

@ -175,7 +175,7 @@ app.use(flash())
// passport
app.use(passport.initialize())
app.use(passport.session())
app.use(useUnless(['/status', '/metrics'], passport.session()))
// check uri is valid before going further
app.use(require('./lib/web/middleware/checkURIValid'))