From 7f9f732f4ea9efd186fbc0fea82bd03d0322b35f Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Tue, 22 Nov 2022 16:33:13 +0000
Subject: [PATCH] fix: a banned user shouldn't be able to access IRs

---
 server/src/server/router/router.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/src/server/router/router.ts b/server/src/server/router/router.ts
index 5c2843b6c..9ab821801 100644
--- a/server/src/server/router/router.ts
+++ b/server/src/server/router/router.ts
@@ -7,13 +7,14 @@ import { UpdateLastSeen } from "server/middleware/update-last-seen";
 
 const router: Router = Router({ mergeParams: true });
 
+router.use(RejectIfBanned);
+
 router.use("/ir", NormalRateLimitMiddleware, irRouter);
 
 // request perms only apply to the api, IR may reuse this
 // but also may require custom authentication.
 router.use(SetRequestPermissions);
 router.use(UpdateLastSeen);
-router.use(RejectIfBanned);
 
 router.use("/api/v1", apiRouterV1);