From e532f9a68396c0d86dbd94ea1361c285f7f70e6d Mon Sep 17 00:00:00 2001
From: WithoutPants <53250216+WithoutPants@users.noreply.github.com>
Date: Fri, 22 Jul 2022 17:23:40 +1000
Subject: [PATCH] Allow unauthenticated access to UI assets (#2755)

* Allow unauthenticated access to UI assets
---
 internal/api/authentication.go                     | 3 ++-
 ui/v2.5/src/components/Changelog/versions/v0161.md | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/internal/api/authentication.go b/internal/api/authentication.go
index a9770c203..176c532a9 100644
--- a/internal/api/authentication.go
+++ b/internal/api/authentication.go
@@ -26,7 +26,8 @@ const (
 )
 
 func allowUnauthenticated(r *http.Request) bool {
-	return strings.HasPrefix(r.URL.Path, loginEndPoint) || r.URL.Path == "/css"
+	// #2715 - allow access to UI files
+	return strings.HasPrefix(r.URL.Path, loginEndPoint) || r.URL.Path == "/css" || strings.HasPrefix(r.URL.Path, "/assets")
 }
 
 func authenticateHandler() func(http.Handler) http.Handler {
diff --git a/ui/v2.5/src/components/Changelog/versions/v0161.md b/ui/v2.5/src/components/Changelog/versions/v0161.md
index f562739c0..ab96c0e70 100644
--- a/ui/v2.5/src/components/Changelog/versions/v0161.md
+++ b/ui/v2.5/src/components/Changelog/versions/v0161.md
@@ -1,3 +1,4 @@
 ### 🐛 Bug fixes
+* Fix UI crash on session timeout. ([#2755](https://github.com/stashapp/stash/pull/2755))
 * Fix incorrect scene metadata being set when video has cover art. ([#2752](https://github.com/stashapp/stash/pull/2752))
 * Fix incorrect image being displayed when first previewing image. ([#2754](https://github.com/stashapp/stash/pull/2754))