mirror of
https://github.com/SillyTavern/SillyTavern.git
synced 2025-06-05 21:59:27 +02:00
[bug] Fix login attempts to disabled users
This commit is contained in:
@ -36,12 +36,12 @@ const basicAuthMiddleware = async function (request, response, callback) {
|
||||
} else if (PER_USER_BASIC_AUTH) {
|
||||
const userHandles = await getAllUserHandles();
|
||||
for (const userHandle of userHandles) {
|
||||
if (username == userHandle) {
|
||||
if (username === userHandle) {
|
||||
const user = await storage.getItem(toKey(userHandle));
|
||||
if (user && (user.password && user.password === getPasswordHash(password, user.salt))) {
|
||||
if (user && user.enabled && (user.password && user.password === getPasswordHash(password, user.salt))) {
|
||||
return callback();
|
||||
}
|
||||
else if (user && !user.password && !password) {
|
||||
else if (user && user.enabled && !user.password && !password) {
|
||||
// Login to an account without password
|
||||
return callback();
|
||||
}
|
||||
|
Reference in New Issue
Block a user