don't require strong auth password if auth disabled

moreati · Jul 1, 2020 · b3b477c · b3b477c
1 parent a4ed688
commit b3b477c
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/main/params.go b/main/params.go
@@ -411,13 +411,15 @@ func init() {
 	// HTTP:
 	Config.HTTPHost = *httpHost
 	Config.HTTPPort = uint16(*httpPort)
-	if Config.APIRequireAuthToken && Config.APIAuthPassword == "" {
-		errs.Add(errors.New("api-auth-password must be provided if api-require-auth is true"))
-		return
-	}
-	if !password.SufficientlyStrong(Config.APIAuthPassword, auth.RequiredPasswordStrength) {
-		errs.Add(errors.New("api-auth-password is not strong enough. Add more characters"))
-		return
+	if Config.APIRequireAuthToken {
+		if Config.APIAuthPassword == "" {
+			errs.Add(errors.New("api-auth-password must be provided if api-require-auth is true"))
+			return
+		}
+		if !password.SufficientlyStrong(Config.APIAuthPassword, auth.RequiredPasswordStrength) {
+			errs.Add(errors.New("api-auth-password is not strong enough. Add more characters"))
+			return
+		}
 	}
 
 	// Logging: