1 local auth_needed = not (

2 request.get_module() == 'index'

3 and (

4 request.get_view() == "index"

5 or request.get_view() == "login"

6 or request.get_action() == "login"

7 or request.get_view() == "register"

8 or request.get_action() == "register"

9 or request.get_view() == "about"

10 or request.get_view() == "reset_password"

11 or request.get_action() == "reset_password"

12 or request.get_view() == "confirm_notify_email"

13 or request.get_action() == "confirm_notify_email"

14 or request.get_action() == "set_lang"

15 )

16 or request.get_module() == "openid"

17 )

18

19 if config.public_access then

20

21 if

22 request.get_module() == "area" and (

23 request.get_view() == "list" or request.get_view() == "show"

24 )

25 or request.get_module() == "policy" and request.get_view() == "show"

26 or request.get_module() == "policy" and request.get_view() == "list"

27 or request.get_module() == "issue" and request.get_view() == "show"

28 or request.get_module() == "initiative" and request.get_view() == "show"

29 or request.get_module() == "suggestion" and request.get_view() == "show"

30 or request.get_module() == "draft" and request.get_view() == "diff"

31 then

32 auth_needed = false

33 end

34

35 end

36

37 if config.api_enabled and request.get_module() == "api" or request.get_module() == "sitemap" then

38 auth_needed = false

39 end

40

41 if config.public_access and not app.session.member_id and auth_needed and request.get_module() == "index" and request.get_view() == "index" then

42 if not config.single_unit_id then

43 request.redirect{ module = "unit", view = "list" }

44 else

45 request.redirect{ module = "area", view = "list" }

46 end

47 return

48 end

49

50 -- if not app.session.user_id then

51 -- trace.debug("DEBUG: AUTHENTICATION BYPASS ENABLED")

52 -- app.session.user_id = 1

53 -- end

54

55 if auth_needed and app.session.member == nil then

56 trace.debug("Not authenticated yet.")

57 request.redirect{ module = 'index', view = 'login' }

58 elseif auth_needed and app.session.member.locked then

59 trace.debug("Member locked.")

60 request.redirect{ module = 'index', view = 'login' }

61 else

62 if auth_needed then

63 trace.debug("Authentication accepted.")

64 else

65 trace.debug("No authentication needed.")

66 end

67

68 --db:query("SELECT check_everything()")

69

70 execute.inner()

71 trace.debug("End of authentication filter.")

72 end

73