From ebe5645fb9e7918f5aec3e2437ecd8b9e0c1faf6 Mon Sep 17 00:00:00 2001
From: shuki <shuki@shuki>
Date: Fri, 6 Mar 2026 06:18:05 +0200
Subject: [PATCH] Fix auth middleware: use insert(0) on FrozenList before app
 starts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 tui/__main__.py | 45 ++++++++++++++++++++++-----------------------
 1 file changed, 22 insertions(+), 23 deletions(-)

diff --git a/tui/__main__.py b/tui/__main__.py
index 6e44e99..bfcafe2 100644
--- a/tui/__main__.py
+++ b/tui/__main__.py
@@ -120,34 +120,33 @@ def main():
             public_url=public_url,
         )
 
-        # Add HTTP Basic Auth middleware if API key is configured
+        # Add HTTP Basic Auth if API key is configured
         if web_key:
+            @aio_web.middleware
+            async def basic_auth_middleware(request, handler):
+                auth_header = request.headers.get("Authorization", "")
+                if auth_header.startswith("Basic "):
+                    try:
+                        decoded = base64.b64decode(auth_header[6:]).decode("utf-8")
+                        req_user, req_pass = decoded.split(":", 1)
+                        if (
+                            secrets.compare_digest(req_user, web_user)
+                            and secrets.compare_digest(req_pass, web_key)
+                        ):
+                            return await handler(request)
+                    except Exception:
+                        pass
+                return aio_web.Response(
+                    status=401,
+                    headers={"WWW-Authenticate": 'Basic realm="GNIZA"'},
+                    text="Authentication required",
+                )
+
             _orig_make_app = server._make_app
 
             async def _authed_make_app():
                 app = await _orig_make_app()
-
-                @aio_web.middleware
-                async def basic_auth(request, handler):
-                    auth_header = request.headers.get("Authorization", "")
-                    if auth_header.startswith("Basic "):
-                        try:
-                            decoded = base64.b64decode(auth_header[6:]).decode("utf-8")
-                            req_user, req_pass = decoded.split(":", 1)
-                            if (
-                                secrets.compare_digest(req_user, web_user)
-                                and secrets.compare_digest(req_pass, web_key)
-                            ):
-                                return await handler(request)
-                        except Exception:
-                            pass
-                    return aio_web.Response(
-                        status=401,
-                        headers={"WWW-Authenticate": 'Basic realm="GNIZA"'},
-                        text="Authentication required",
-                    )
-
-                app.middlewares.insert(0, basic_auth)
+                app.middlewares.insert(0, basic_auth_middleware)
                 return app
 
             server._make_app = _authed_make_app