Max/zkldi_Tachi
1
0
Fork 0
mirror of https://github.com/zkldi/Tachi.git synced 2026-10-05 13:28:08 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix potential crash in POST /api/v1/import/orphans if request was made without self-key permissions.

Browse Source
This commit is contained in:
zkldi
2021-12-16 04:09:50 +00:00
parent 00b37e88d9
commit bf68c9dc64
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/src/server/router/api/v1/import/router.ts
+1 -1
View File
@@ -162,7 +162,7 @@ router.post(
* @name POST /api/v1/import/orphans
*/
router.post("/orphans", RequirePermissions("submit_score"), async (req, res) => {
const userDoc = await GetUserWithIDGuaranteed(req.session.tachi!.user.id);
const userDoc = await GetUserWithIDGuaranteed(req[SYMBOL_TachiAPIAuth].userID!);
logger.info(`User ${FormatUserDoc(userDoc)} forced an orphan sync.`);