From 8b0f3d70d91fe116e006e3ea0fba209fde910970 Mon Sep 17 00:00:00 2001
From: Liang Ding <d@b3log.org>
Date: Wed, 6 Jul 2022 22:13:49 +0800
Subject: [PATCH] =?UTF-8?q?:bug:=20=E6=B5=8F=E8=A7=88=E5=99=A8=E7=AB=AF?=
 =?UTF-8?q?=E5=BC=80=E5=90=AF=E8=AE=BF=E9=97=AE=E9=89=B4=E6=9D=83=E5=90=8E?=
 =?UTF-8?q?=E6=96=87=E6=A1=A3=E6=9B=B4=E6=96=B0=E6=9C=AA=E4=BF=9D=E5=AD=98?=
 =?UTF-8?q?=20Fix=20https://github.com/siyuan-note/siyuan/issues/5096?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/appearance/langs/en_US.json  | 3 ++-
 app/appearance/langs/es_ES.json  | 3 ++-
 app/appearance/langs/fr_FR.json  | 3 ++-
 app/appearance/langs/zh_CHT.json | 3 ++-
 app/appearance/langs/zh_CN.json  | 3 ++-
 kernel/model/session.go          | 6 ++++++
 6 files changed, 16 insertions(+), 5 deletions(-)

diff --git a/app/appearance/langs/en_US.json b/app/appearance/langs/en_US.json
index f3a98c2b7..1b8cc76b9 100644
--- a/app/appearance/langs/en_US.json
+++ b/app/appearance/langs/en_US.json
@@ -925,6 +925,7 @@
     "152": "Uploaded files %d, chunks %d, sent bytes %s",
     "153": "Downloaded files %d, chunks %d, received bytes %s",
     "154": "The cloud can only support backup up to 12 snapshots",
-    "155": "Cloud sync directory has been reset to [main]"
+    "155": "Cloud sync directory has been reset to [main]",
+    "156": "Access authentication failed, please refresh the page"
   }
 }
diff --git a/app/appearance/langs/es_ES.json b/app/appearance/langs/es_ES.json
index dc5fe2d7a..6dc4d00d9 100644
--- a/app/appearance/langs/es_ES.json
+++ b/app/appearance/langs/es_ES.json
@@ -925,6 +925,7 @@
     "152": "Archivos cargados %d, fragmentos %d, bytes enviados %s",
     "153": "Archivos descargados %d, fragmentos %d, bytes recibidos %s",
     "154": "La nube solo admite copias de seguridad de hasta 12 instantáneas",
-    "155": "El directorio de sincronización de la nube se ha restablecido a [main]"
+    "155": "El directorio de sincronización de la nube se ha restablecido a [main]",
+    "156": "Error en la autenticación de acceso, actualice la página"
   }
 }
diff --git a/app/appearance/langs/fr_FR.json b/app/appearance/langs/fr_FR.json
index b22056489..ce58811ff 100644
--- a/app/appearance/langs/fr_FR.json
+++ b/app/appearance/langs/fr_FR.json
@@ -925,6 +925,7 @@
     "152": "Fichiers téléchargés %d, morceaux %d, octets envoyés %s",
     "153": "Fichiers chargés %d, morceaux %d, octets reçus %s",
     "154": "Le cloud ne peut prendre en charge que la sauvegarde jusqu'à 12 instantanés",
-    "155": "Le répertoire de synchronisation du cloud a été réinitialisé sur [main]"
+    "155": "Le répertoire de synchronisation du cloud a été réinitialisé sur [main]",
+    "156": "Échec de l'authentification d'accès, veuillez actualiser la page"
   }
 }
diff --git a/app/appearance/langs/zh_CHT.json b/app/appearance/langs/zh_CHT.json
index b2e4bb5ae..5b782f776 100644
--- a/app/appearance/langs/zh_CHT.json
+++ b/app/appearance/langs/zh_CHT.json
@@ -924,6 +924,7 @@
     "152": "上傳文件數 %d 上傳分塊數 %d 發送字節數 %s",
     "153": "下載文件數 %d 下載分塊數 %d 接收字節數 %s",
     "154": "雲端最多只能支持備份 12 個快照",
-    "155": "雲端同步目錄已經重置為 [main]"
+    "155": "雲端同步目錄已經重置為 [main]",
+    "156": "訪問鑑權失敗，請刷新頁面"
   }
 }
diff --git a/app/appearance/langs/zh_CN.json b/app/appearance/langs/zh_CN.json
index 0f40ca5be..1f73ea0e5 100644
--- a/app/appearance/langs/zh_CN.json
+++ b/app/appearance/langs/zh_CN.json
@@ -926,6 +926,7 @@
     "152": "上传文件数 %d 上传分块数 %d 发送字节数 %s",
     "153": "下载文件数 %d 下载分块数 %d 接收字节数 %s",
     "154": "云端最多只能支持备份 12 个快照",
-    "155": "云端同步目录已经重置为 [main]"
+    "155": "云端同步目录已经重置为 [main]",
+    "156": "访问鉴权失败，请刷新页面"
   }
 }
diff --git a/kernel/model/session.go b/kernel/model/session.go
index 698675036..11089b034 100644
--- a/kernel/model/session.go
+++ b/kernel/model/session.go
@@ -140,6 +140,12 @@ func CheckAuth(c *gin.Context) {
 	if session.AccessAuthCode != Conf.AccessAuthCode {
 		userAgentHeader := c.GetHeader("User-Agent")
 		if strings.HasPrefix(userAgentHeader, "SiYuan/") || strings.HasPrefix(userAgentHeader, "Mozilla/") {
+			if "GET" != c.Request.Method {
+				c.JSON(401, map[string]interface{}{"code": -1, "msg": Conf.Language(156)})
+				c.Abort()
+				return
+			}
+
 			c.Redirect(302, "/check-auth")
 			c.Abort()
 			return