add auth in /uplods

app.js

@@ -226,9 +226,11 @@ app.locals.enableDropBoxSave = config.isDropboxEnable
 app.locals.enableGitHubGist = config.isGitHubEnable
 app.locals.enableGitlabSnippets = config.isGitlabSnippetsEnable
 
-logger.info('add auth into /uploads')
+app.use('/uploads', (req, res, next) => {
+  if (req.session.user) next()
+  else response.errorNotFound(req, res)
+}, express.static(path.resolve(__dirname, config.uploadsPath), { maxAge: config.staticCacheTime }))
 
-app.use('/uploads', express.static(path.resolve(__dirname, config.uploadsPath), { maxAge: config.staticCacheTime }))
 app.use(require('./lib/routes').router)
 
 // response not found if no any route matxches