From 380bb4d8e49faf319405ce7508be21eb4fc0459d Mon Sep 17 00:00:00 2001
From: IrosTheBeggar <paul.sori@pm.me>
Date: Mon, 31 May 2021 15:25:00 -0400
Subject: [PATCH] force scanner api to use jwts when login disabled

---
 src/api/auth.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/api/auth.js b/src/api/auth.js
index cfe11d1..4c9f1b3 100644
--- a/src/api/auth.js
+++ b/src/api/auth.js
@@ -31,7 +31,9 @@ exports.setup = (mstream) => {
   mstream.use((req, res, next) => {
     try {
       // Handle No Users
-      if (config.program.users && Object.keys(config.program.users).length === 0) {
+      if (Object.keys(config.program.users).length === 0
+        && !req.path.startsWith('/api/v1/scanner/')
+      ) {
         req.user = {
           vpaths: Object.keys(config.program.folders),
           username: 'mstream-user',