Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent 401 error on open routes #23

Open
dustinkerstein opened this issue May 2, 2018 · 4 comments
Open

Prevent 401 error on open routes #23

dustinkerstein opened this issue May 2, 2018 · 4 comments

Comments

@dustinkerstein
Copy link

I get this error on open routes:

Failed to load resource: the server responded with a status of 401 () /wwwhisper/auth/api/whoami/?_=1525223489528

Is there any way to prevent this?

@wrr
Copy link
Owner

wrr commented May 4, 2018

Do you see this in JavaScript console or as a part of a page?

@dustinkerstein
Copy link
Author

This is visible in the JavaScript console

@wrr
Copy link
Owner

wrr commented May 4, 2018

401 seems to be a proper response, but I will see if there is anything that can be done to prevent the error message from showing in the console.

The open routes still show a user name and logout button for logged-in users. To determine if the user is logged in, the /wwwhisper/auth/api/whoami/ is contacted which returns either a user name or 401 (if the user is not logged-in).

@dustinkerstein
Copy link
Author

dustinkerstein commented May 10, 2018

K cool. Yeah, I just would like to hide this error since 99.999% of website visits won't be logged in via wwwhisper and I'd rather not provide this error message as a breadcrumb for curious hackers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants