Authorization when downloading apps

[JohnnyRace]

部署方式 | How to Deploy

Docker (Default)

部署版本 | Version

6.0.4

Git 哈希值 (长度 40)| Git Ref (40 length)

eeb670a

反代服务 | Reverse Proxy

caddy

HTTPS 证书类型 | HTTPS(SSL)

自签名证书 Self-signed SSL

已阅读文档 | Read the document

• 已阅读 | Yes

描述 | Description

I've just updated from 5.3.7 to 6.0.4 and see that everyone can download my app via ${domain}/download/releases/${number}. I see that it was marked as "fixed" here 6ae6394, and the commit is included since 6.0.0. But it doesn't seem to be working for me. Did I miss anything in configuration (actually, using the base one)?
I haven't configured channel password because it's not that secure as expected. It would be nice to have complete auth process for this endpoint in the same way as for the main page.

问题日志 | Relevant log output

[welcome[bot]]

感谢你提交的问题或反馈，我会在有时间的时候回复在此期间你可以看看之前被解决的反馈说不定有你需要的答案。
Thanks for opening this issue, a maintainer will get back to you shortly!

[icyleaf]

That fixes need enable channel password.

[JohnnyRace]

Got it. But can I ask you to add authorization for /download and /channel endpoints? This is frustrating that everybody can download the app. Setting up password doesn't seem to be the best practice since you need to share this password with a bunch of people if you have a big team. I tried adding before_action: authenticate_user! method to download controller, but it broke iOS installation. Could you please assist here?