Merge pull request #13 from inferno-community/FI-1160-fix-BDE-03-afte…

…r-rebase FI-1160: fix BDE-03
inferno-framework · Mar 9, 2021 · ac0eaa9 · ac0eaa9
2 parents 3b44c6c + b59e7e5
commit ac0eaa9
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:9
+FROM node:12
 
 WORKDIR /app
 

diff --git a/database.r4.db b/database.r4.db
diff --git a/lib.js b/lib.js
@@ -268,7 +268,9 @@ function checkAuth(req, res, next)
         // checkAuth middleware (which excludes routes like /metadata).
         // Unless the request has 'sim' data attached to it, then pay attention to the
         // 'secure' flag.
-        if (!req.sim || req.sim.secure) {
+        // if sim.secure is undefined or null or anything else, assume auth is still required
+        let authIsRequired = !req.sim || req.sim.secure !== false; 
+        if (authIsRequired) {
             return operationOutcome(
                 res,
                 "Authentication is required",