From abdb03dfc08a2ece3bbba78c850efa74125a6afd Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Wed, 1 Dec 2021 00:10:40 +0000
Subject: [PATCH 1/4] Make redirects work

---
 client/src/util/misc.ts | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/client/src/util/misc.ts b/client/src/util/misc.ts
index 5e5f91253..fefb8d715 100644
--- a/client/src/util/misc.ts
+++ b/client/src/util/misc.ts
@@ -191,9 +191,9 @@ export function Sleep(ms: number) {
 }
 
 export function HistorySafeGoBack(history: ReturnType<typeof useHistory>) {
-	if (history.length === 1) {
-		history.replace("/");
-	} else {
-		history.goBack();
-	}
+	// if (history.length === 1) {
+	history.replace("/");
+	// } else {
+	// history.goBack();
+	// }
 }

From ee571f432455f49102f96323ea50dde5a5c799b1 Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Wed, 1 Dec 2021 00:11:19 +0000
Subject: [PATCH 2/4] EMERG: fix resetpassword

---
 client/src/app/pages/ResetPasswordPage.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/src/app/pages/ResetPasswordPage.tsx b/client/src/app/pages/ResetPasswordPage.tsx
index b1480d49c..66043fca8 100644
--- a/client/src/app/pages/ResetPasswordPage.tsx
+++ b/client/src/app/pages/ResetPasswordPage.tsx
@@ -32,7 +32,7 @@ export default function ResetPasswordPage() {
 							headers: {
 								"Content-Type": "application/json",
 							},
-							body: JSON.stringify({ code, password }),
+							body: JSON.stringify({ code, "!password": password }),
 						},
 						true,
 						true

From 4f43066e97a8c00e215ab9ec01ded161a1d9cd3e Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Wed, 1 Dec 2021 00:31:25 +0000
Subject: [PATCH 3/4] Fix kailua hash

---
 client/src/app/routes/ImportRoutes.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/src/app/routes/ImportRoutes.tsx b/client/src/app/routes/ImportRoutes.tsx
index db695fcb9..36d515d3e 100644
--- a/client/src/app/routes/ImportRoutes.tsx
+++ b/client/src/app/routes/ImportRoutes.tsx
@@ -134,7 +134,7 @@ export default function ImportRoutes() {
 							</Route>
 							<Route exact path="/dashboard/import/sdvx-min">
 								<KAIIntegrationPage
-									hash="5885d4123b6db3f0127111a587ea6549f533a1*78dc2e198d31f98bed4ffd0cad"
+									hash="5885d4123b6db3f0127111a587ea6549f533a178dc2e198d31f98bed4ffd0cad"
 									clientID={process.env.REACT_APP_MIN_CLIENT_ID ?? ""}
 									redirectUri={`${window.location.origin}/oauth2-callback/min`}
 									kaiType="MIN"

From cad1cc04149fb0b473ce65b0979f9fe5467bf1f4 Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Wed, 1 Dec 2021 11:28:52 +0000
Subject: [PATCH 4/4] Make /settings 401 if you're not the requesting user
 (note that this was still api secure, just UI tried to go there anyway)

---
 client/src/app/routes/UserRoutes.tsx | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/client/src/app/routes/UserRoutes.tsx b/client/src/app/routes/UserRoutes.tsx
index c868d87d7..cc76c901f 100644
--- a/client/src/app/routes/UserRoutes.tsx
+++ b/client/src/app/routes/UserRoutes.tsx
@@ -257,9 +257,11 @@ function UserGamePlaytypeRoutes({ reqUser, game }: { reqUser: PublicUserDocument
 				<Route exact path="/dashboard/users/:userID/games/:game/:playtype/leaderboard">
 					<LeaderboardsPage reqUser={reqUser} game={game} playtype={playtype} />
 				</Route>
-				<Route exact path="/dashboard/users/:userID/games/:game/:playtype/settings">
-					<UGPTSettingsPage reqUser={reqUser} game={game} playtype={playtype} />
-				</Route>
+				<RequireAuthAsUserParam>
+					<Route exact path="/dashboard/users/:userID/games/:game/:playtype/settings">
+						<UGPTSettingsPage reqUser={reqUser} game={game} playtype={playtype} />
+					</Route>
+				</RequireAuthAsUserParam>
 				<Route path="*">
 					<ErrorPage statusCode={404} />
 				</Route>