albert/mrfrys-node-server
1
0
Fork 0
mirror of https://gitlab.com/MrFry/mrfrys-node-server synced 2025-04-01 20:24:18 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

validation token valid query checking

Browse source
This commit is contained in:
mrfry 2023-03-09 17:22:44 +01:00
parent 73aec278ac
commit 8632d5b5ce
2 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/modules/api/submodules/userManagement.ts
View file

@ -18,7 +18,7 @@
------------------------------------------------------------------------- */ ------------------------------------------------------------------------- */
import { v4 as uuidv4, v5 } from 'uuid' import { v4 as uuidv4, v5, validate as validateuuid } from 'uuid'
import type { Database } from 'better-sqlite3' import type { Database } from 'better-sqlite3'
import logger from '../../../utils/logger' import logger from '../../../utils/logger'
@ -288,7 +288,7 @@ function setup(data: SubmoduleData): Submodule {
const user: User = req.session.user const user: User = req.session.user
const { token, userid } = req.query const { token, userid } = req.query
if (token && userid) { if (validateuuid(token) && !Number.isNaN(+userid)) {
const specifiedUser: User = dbtools.Select(userDB, 'users', { const specifiedUser: User = dbtools.Select(userDB, 'users', {
id: +userid, id: +userid,
})[0] })[0]
@ -305,6 +305,9 @@ function setup(data: SubmoduleData): Submodule {
res.json({ res.json({
result: 'success', result: 'success',
key: key, key: key,
...((token || userid) && {
msg: 'userid or token was provided, but was invalid',
}),
}) })
} }
} }

2
submodules/qmining-page

@ -1 +1 @@
Subproject commit ce63911b68e5604c02f5761dd4b5388272b76c6f Subproject commit 32522097c0c0f442e93e00b54ed5dad495f8b093