From 5b78e0d63a7da84c52b80234455a406668921c3c Mon Sep 17 00:00:00 2001
From: iglocska <andras.iklody@gmail.com>
Date: Sun, 21 Jun 2020 21:27:40 +0200
Subject: [PATCH] chg: [routes] updated for default landing page

---
 app/config/routes.php | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/app/config/routes.php b/app/config/routes.php
index 46b8a9a..8d47701 100644
--- a/app/config/routes.php
+++ b/app/config/routes.php
@@ -44,26 +44,27 @@ use Cake\Routing\RouteBuilder;
  */
 /** @var \Cake\Routing\RouteBuilder $routes */
 $routes->setRouteClass(DashedRoute::class);
-
 $routes->scope('/', function (RouteBuilder $builder) {
     $builder->setExtensions(['json']);
     // Register scoped middleware for in scopes.
     $builder->registerMiddleware('csrf', new CsrfProtectionMiddleware([
         'httpOnly' => true,
     ]));
-
     /*
      * Apply a middleware to the current route scope.
      * Requires middleware to be registered through `Application::routes()` with `registerMiddleware()`
+     * Dirty way of disabling the middleware if the AUTHORIZATION header is set
      */
-    $builder->applyMiddleware('csrf');
+     if (empty($_SERVER['HTTP_AUTHORIZATION'])) {
+         $builder->applyMiddleware('csrf');
+     }
 
     /*
      * Here, we are connecting '/' (base path) to a controller called 'Pages',
      * its action called 'display', and we pass a param to select the view file
      * to use (in this case, templates/Pages/home.php)...
      */
-    $builder->connect('/', ['controller' => 'Pages', 'action' => 'display', 'home']);
+    $builder->connect('/', ['controller' => 'Instance', 'action' => 'home']);
 
     /*
      * ...and connect the rest of 'Pages' controller's URLs.