fix: Allow file uploads if auth is disabled. Fixes #771

Revert to pre-0.14 behavior of assuming dev-mode if auth is disabled.
h2oai · Apr 29, 2021 · e692969 · e692969
1 parent ceea559
commit e692969
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/file_store.go b/file_store.go
@@ -48,8 +48,8 @@ func (fs *FileStore) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	case http.MethodPost:
 		// Disallow if:
 		// - unauthorized api call
-		// - auth not enabled or auth enabled and unauthorized
-		if !fs.keychain.allow(r) && (fs.auth == nil || (fs.auth != nil && !fs.auth.allow(r))) { // API or UI
+		// - auth enabled and unauthorized
+		if !fs.keychain.allow(r) && (fs.auth != nil && !fs.auth.allow(r)) { // API or UI
 			http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
 			return
 		}