mirror of
https://github.com/SillyTavern/SillyTavern.git
synced 2025-06-05 21:59:27 +02:00
[bug] Fix basic auto-logins to disabled users
This commit is contained in:
@@ -674,11 +674,11 @@ async function basicUserLogin(request) {
|
||||
if (login == userHandle) {
|
||||
const user = await storage.getItem(toKey(userHandle));
|
||||
// Verify pass again here just to be sure
|
||||
if (user && user.password && user.password === getPasswordHash(password, user.salt)) {
|
||||
if (user && user.enabled && user.password && user.password === getPasswordHash(password, user.salt)) {
|
||||
request.session.handle = userHandle;
|
||||
return true;
|
||||
}
|
||||
else if (user && !user.password && !password) {
|
||||
else if (user && user.enabled && !user.password && !password) {
|
||||
// Login to an account without password
|
||||
request.session.handle = userHandle;
|
||||
return true;
|
||||
|
Reference in New Issue
Block a user