Some extra changes

2023-05-09 20:04:11 -04:00
parent d6a72ace83
commit 991dc32ce4
1 changed files with 3 additions and 0 deletions
--- a/lib/server/controllers/auth.ts
+++ b/lib/server/controllers/auth.ts
@@ -45,6 +45,9 @@ router.post(process.env.RESET_ROUTE || RESET_ROUTE, async (ctx, next) => {
 });

 router.patch('/:record', authenticated(), (ctx: Koa.Context) => {
+    if (ctx.user !== ctx.param.record) {
+        ctx.throw(StatusCodes.UNAUTHORIZED);
+    }
    const data = Auth.findOneAndUpdate({ record: ctx.params.record });
    if (!data) {
        ctx.throw(StatusCodes.NOT_FOUND);