secured root route access without authentication

1 files changed, 4 insertions, 1 deletions

diff --git a/src/server/Initialization.ts b/src/server/Initialization.ts
index 2e87c7a1a..6fe67f2c7 100644
--- a/src/server/Initialization.ts
+++ b/src/server/Initialization.ts
@@ -38,13 +38,16 @@ export default async function InitializeServer(options: InitializationOptions) {
     app.use(express.static(publicDirectory));
     app.use("/images", express.static(publicDirectory));
 
-    app.use("*", ({ user, originalUrl }, _res, next) => {
+    app.use("*", ({ user, originalUrl }, res, next) => {
         if (user && !originalUrl.includes("Heartbeat")) {
             const userEmail = user.email;
             if (userEmail) {
                 timeMap[userEmail] = Date.now();
             }
         }
+        if (!user && originalUrl === "/") {
+            return res.redirect("/login");
+        }
         next();
     });