From 94ea9ede8981d0d6ebc34d095ffa69050c53ae9a Mon Sep 17 00:00:00 2001
From: Ilja Neumann <node512@gmail.com>
Date: Fri, 10 Jul 2020 16:17:52 +0200
Subject: [PATCH] Abort middleware execution if no token header is present

---
 pkg/middleware/create_home.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkg/middleware/create_home.go b/pkg/middleware/create_home.go
index facb5259e6..480d626166 100644
--- a/pkg/middleware/create_home.go
+++ b/pkg/middleware/create_home.go
@@ -25,12 +25,16 @@ func CreateHome(opts ...Option) func(next http.Handler) http.Handler {
 				"secret": opt.TokenManagerConfig.JWTSecret,
 			})
 			if err != nil {
-				opt.Logger.Err(err).Msg("error creating tokenManager")
 				w.WriteHeader(http.StatusInternalServerError)
 				return
 			}
 
 			token := r.Header.Get("x-access-token")
+			if token == "" {
+				next.ServeHTTP(w, r)
+				return
+			}
+
 			user, err := tokenManager.DismantleToken(r.Context(), token)
 			if err != nil {
 				opt.Logger.Err(err).Msg("error getting user from access token")