mirror of
https://github.com/louislam/uptime-kuma.git
synced 2024-12-24 22:14:47 +02:00
Check if the password changed when user is not null
This commit is contained in:
parent
e64bf0e3fe
commit
1a862e47ab
@ -299,12 +299,12 @@ let needSetup = false;
|
|||||||
decoded.username,
|
decoded.username,
|
||||||
]);
|
]);
|
||||||
|
|
||||||
// Check if the password changed
|
|
||||||
if (decoded.h !== shake256(user.password, SHAKE256_LENGTH)) {
|
|
||||||
throw new Error("The token is invalid due to password change or old token");
|
|
||||||
}
|
|
||||||
|
|
||||||
if (user) {
|
if (user) {
|
||||||
|
// Check if the password changed
|
||||||
|
if (decoded.h !== shake256(user.password, SHAKE256_LENGTH)) {
|
||||||
|
throw new Error("The token is invalid due to password change or old token");
|
||||||
|
}
|
||||||
|
|
||||||
log.debug("auth", "afterLogin");
|
log.debug("auth", "afterLogin");
|
||||||
afterLogin(socket, user);
|
afterLogin(socket, user);
|
||||||
log.debug("auth", "afterLogin ok");
|
log.debug("auth", "afterLogin ok");
|
||||||
|
Loading…
Reference in New Issue
Block a user