mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-06 22:40:14 -05:00
3ff9146d9e
- remove sessions - remove all references to csrf - create a shared base model for the 2 types of token
39 lines
No EOL
1.3 KiB
JavaScript
39 lines
No EOL
1.3 KiB
JavaScript
var admin = require('../controllers/admin'),
|
|
config = require('../config'),
|
|
express = require('express'),
|
|
|
|
ONE_HOUR_S = 60 * 60,
|
|
ONE_YEAR_S = 365 * 24 * ONE_HOUR_S,
|
|
|
|
adminRoutes;
|
|
|
|
adminRoutes = function (middleware) {
|
|
var router = express.Router(),
|
|
subdir = config().paths.subdir;
|
|
|
|
// ### Admin routes
|
|
router.get(/^\/(logout|signout)\/$/, function redirect(req, res) {
|
|
/*jslint unparam:true*/
|
|
res.set({'Cache-Control': 'public, max-age=' + ONE_YEAR_S});
|
|
res.redirect(301, subdir + '/ghost/signout/');
|
|
});
|
|
router.get(/^\/signup\/$/, function redirect(req, res) {
|
|
/*jslint unparam:true*/
|
|
res.set({'Cache-Control': 'public, max-age=' + ONE_YEAR_S});
|
|
res.redirect(301, subdir + '/ghost/signup/');
|
|
});
|
|
|
|
router.post('/ghost/upload/', middleware.busboy, admin.upload);
|
|
|
|
// redirect to /ghost and let that do the authentication to prevent redirects to /ghost//admin etc.
|
|
router.get(/^\/((ghost-admin|admin|wp-admin|dashboard|signin|login)\/?)$/, function (req, res) {
|
|
/*jslint unparam:true*/
|
|
res.redirect(subdir + '/ghost/');
|
|
});
|
|
|
|
router.get('/ghost/*', middleware.redirectToSetup, admin.index);
|
|
|
|
return router;
|
|
};
|
|
|
|
module.exports = adminRoutes; |