From 1a0ddf9a05ea74cd26ad635385e88aa1b7a70f67 Mon Sep 17 00:00:00 2001
From: Nam PHAM <nampnq@users.noreply.github.com>
Date: Sat, 2 Jul 2022 23:48:04 +0200
Subject: [PATCH] Disable check user when fxa is not enabled

---
 server/middleware/auth.js | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/server/middleware/auth.js b/server/middleware/auth.js
index c98d095b..128af07c 100644
--- a/server/middleware/auth.js
+++ b/server/middleware/auth.js
@@ -1,6 +1,7 @@
 const assert = require('assert');
 const crypto = require('crypto');
 const storage = require('../storage');
+const config = require('../config');
 const fxa = require('../fxa');
 
 module.exports = {
@@ -70,10 +71,11 @@ module.exports = {
       const token = authHeader.split(' ')[1];
       req.user = await fxa.verify(token);
     }
-    if (req.user) {
-      next();
-    } else {
+
+    if (config.fxa_required && !req.user) {
       res.sendStatus(401);
+    } else {
+      next();
     }
   }
 };