From 14fcfb521341fd7619cab0301cef699cb42d2080 Mon Sep 17 00:00:00 2001 From: ArthurHoaro Date: Tue, 1 Sep 2020 11:26:24 +0200 Subject: Fix login loop for private instances GET /login and POST /login have 2 distinct route name. Fixes #1533 --- application/front/ShaarliMiddleware.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/application/front/ShaarliMiddleware.php b/application/front/ShaarliMiddleware.php index c015c0c6..d1aa1399 100644 --- a/application/front/ShaarliMiddleware.php +++ b/application/front/ShaarliMiddleware.php @@ -94,7 +94,7 @@ class ShaarliMiddleware && $this->container->conf->get('privacy.force_login') // and the current page isn't already the login page // and the user is not requesting a feed (which would lead to a different content-type as expected) - && !in_array($next->getName(), ['login', 'atom', 'rss'], true) + && !in_array($next->getName(), ['login', 'processLogin', 'atom', 'rss'], true) ) { throw new UnauthorizedException(); } -- cgit v1.2.3