From 7c55fc03aa629aaefa431a2328e351dc1a8012ba Mon Sep 17 00:00:00 2001
From: Gisle Aune <dev@gisle.me>
Date: Sun, 19 May 2019 21:37:01 +0200
Subject: [PATCH] Fixed locals middleware doing an auth check for assets,
 scripts and other static content.

---
 middleware/locals.js | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/middleware/locals.js b/middleware/locals.js
index d537063..30e78e9 100644
--- a/middleware/locals.js
+++ b/middleware/locals.js
@@ -28,15 +28,17 @@ module.exports = (req, res, next) => {
     }
   }
 
-  if (req.user) {
-    res.locals.user = {
-      loggedIn: true,
-      name: req.user._json.name,
-      permissions: getPermissions(req.user._json.name),
-    }
-  } else {
-    res.locals.user = {
-      loggedIn: false,
+  if (["/static/", "/hax/", "/assets/"].find(p => req.path.startsWith(p)) == null) {
+    if (req.user) {
+      res.locals.user = {
+        loggedIn: true,
+        name: req.user._json.name,
+        permissions: getPermissions(req.user._json.name),
+      }
+    } else {
+      res.locals.user = {
+        loggedIn: false,
+      }
     }
   }