admin/oc-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: public view with masked IPs, unlock button for full view

Browse Source
This commit is contained in:
mango
2026-02-22 22:22:57 +08:00
parent 670695066d
commit 4519d4042d
2 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
server/index.js
View File

@@ -119,20 +119,19 @@ const server = http.createServer((req, res) => {
// API routes
(async () => {
try {
// GET /api/dashboard - requires auth
// GET /api/dashboard - public (masked) or authed (full)
if (url.pathname === '/api/dashboard' && method === 'GET') {
if (!auth()) return;
const authed = (req.headers.authorization||'').replace('Bearer ','') === AUTH_TOKEN;
const now = Math.floor(Date.now()/1000);
const today = now - (now % 86400);
const nodes = getNodes.all();
const nodes = getNodes.all().map(n => authed ? n : {...n, host: '***'});
const stats = getStats.get(today);
const reqs = getReqs.all(500);
return json(200, { nodes, stats, requests: reqs, token: undefined });
return json(200, { nodes, stats, requests: reqs, authed });
}
// GET /api/requests - requires auth
// GET /api/requests - public (masked) or authed (full)
if (url.pathname === '/api/requests' && method === 'GET') {
if (!auth()) return;
const page = parseInt(url.searchParams.get('page') || '1');
const size = Math.min(parseInt(url.searchParams.get('size') || '50'), 200);
const offset = (page - 1) * size;