Merge pull request #779 from MoonRide303/auth-file-access

Blocked remote access to auth.json

modules/auth.py

@@ -1,5 +1,6 @@
 import json
 import hashlib
+import modules.constants as constants
 
 from os.path import exists
 
@@ -28,7 +29,7 @@ def load_auth_data(filename=None):
     return auth_dict
 
 
-auth_dict = load_auth_data('auth.json')
+auth_dict = load_auth_data(constants.AUTH_FILENAME)
 
 auth_enabled = auth_dict != None
 

modules/constants.py

@@ -1,3 +1,5 @@
 # as in k-diffusion (sampling.py)
 MIN_SEED = 0
 MAX_SEED = 2**63 - 1
+
+AUTH_FILENAME = 'auth.json'

webui.py

@@ -378,5 +378,6 @@ shared.gradio_root.launch(
     server_name=args_manager.args.listen,
     server_port=args_manager.args.port,
     share=args_manager.args.share,
-    auth=check_auth if args_manager.args.share and auth_enabled else None
+    auth=check_auth if args_manager.args.share and auth_enabled else None,
+    blocked_paths=[constants.AUTH_FILENAME]
 )