Abort middleware execution if no token header is present

owncloud · Jul 10, 2020 · 9097fcd · 9097fcd
1 parent 7c3e39c
commit 9097fcd
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/middleware/create_home.go b/pkg/middleware/create_home.go
@@ -25,12 +25,16 @@ func CreateHome(opts ...Option) func(next http.Handler) http.Handler {
 				"secret": opt.TokenManagerConfig.JWTSecret,
 			})
 			if err != nil {
-				opt.Logger.Err(err).Msg("error creating tokenManager")
 				w.WriteHeader(http.StatusInternalServerError)
 				return
 			}
 
 			token := r.Header.Get("x-access-token")
+			if token == "" {
+				next.ServeHTTP(w, r)
+				return
+			}
+
 			user, err := tokenManager.DismantleToken(r.Context(), token)
 			if err != nil {
 				opt.Logger.Err(err).Msg("error getting user from access token")