Authorization when downloading apps

[JohnnyRace]

部署方式 | How to Deploy

Docker (Default)

部署版本 | Version

6.0.4

Git 哈希值 (长度 40)| Git Ref (40 length)

eeb670a

反代服务 | Reverse Proxy

caddy

HTTPS 证书类型 | HTTPS(SSL)

自签名证书 Self-signed SSL

已阅读文档 | Read the document

• 已阅读 | Yes

描述 | Description

I've just updated from 5.3.7 to 6.0.4 and see that everyone can download my app via ${domain}/download/releases/${number}. I see that it was marked as "fixed" here 6ae6394, and the commit is included since 6.0.0. But it doesn't seem to be working for me. Did I miss anything in configuration (actually, using the base one)?
I haven't configured channel password because it's not that secure as expected. It would be nice to have complete auth process for this endpoint in the same way as for the main page.

问题日志 | Relevant log output

[icyleaf]

That fixes need enable channel password.

[JohnnyRace]

Got it. But can I ask you to add authorization for /download and /channel endpoints? This is frustrating that everybody can download the app. Setting up password doesn't seem to be the best practice since you need to share this password with a bunch of people if you have a big team. I tried adding before_action: authenticate_user! method to download controller, but it broke iOS installation. Could you please assist here?

[icyleaf]

I’m sorry about the inconvenience with customization. You’re free to fork the project and maintain your own branch (similar to #2040), or we can discuss paid customization if needed.

Thanks for your attention and patience — as an open-source maintainer and freelancer, I try to balance my time and focus carefully. Your understanding is greatly appreciated.