From 6499b988747a5a1dc937f0f66f68785f0d65b79e Mon Sep 17 00:00:00 2001
From: Zog
Date: Tue, 27 Feb 2018 08:40:26 +0100
Subject: Refs #5871; Limit access to Sidekiq dashboard to authenticated users

---
 Gemfile          | 2 +-
 config/routes.rb | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Gemfile b/Gemfile
index c88041781..6fcaf8896 100644
--- a/Gemfile
+++ b/Gemfile
@@ -134,7 +134,7 @@ gem 'acts_as_tree', '~> 2.1.0', require: 'acts_as_tree'
 gem 'rabl'
 gem 'carrierwave', '~> 1.0'
 
-gem 'sidekiq'
+gem 'sidekiq', require: ['sidekiq', 'sidekiq/web']
 gem 'whenever', github: 'af83/whenever', require: false # '~> 0.9'
 gem 'rake'
 gem 'devise-async'
diff --git a/config/routes.rb b/config/routes.rb
index 25105241a..76d6b6dc7 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -1,5 +1,3 @@
-require 'sidekiq/web'
-
 ChouetteIhm::Application.routes.draw do
   resource :dashboard
 
@@ -179,8 +177,10 @@ ChouetteIhm::Application.routes.draw do
     end
   end
 
-  mount Sidekiq::Web => '/sidekiq'
-
+  authenticate :user do
+    mount Sidekiq::Web => '/sidekiq'
+  end
+  
   namespace :api do
     namespace :v1 do
       resources :workbenches, except: [:destroy] do
-- 
cgit v1.2.3