mirror of
https://github.com/SillyTavern/SillyTavern.git
synced 2025-06-05 21:59:27 +02:00
[bug] Fix basic auto-logins to disabled users
This commit is contained in:
@@ -674,11 +674,11 @@ async function basicUserLogin(request) {
|
|||||||
if (login == userHandle) {
|
if (login == userHandle) {
|
||||||
const user = await storage.getItem(toKey(userHandle));
|
const user = await storage.getItem(toKey(userHandle));
|
||||||
// Verify pass again here just to be sure
|
// Verify pass again here just to be sure
|
||||||
if (user && user.password && user.password === getPasswordHash(password, user.salt)) {
|
if (user && user.enabled && user.password && user.password === getPasswordHash(password, user.salt)) {
|
||||||
request.session.handle = userHandle;
|
request.session.handle = userHandle;
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
else if (user && !user.password && !password) {
|
else if (user && user.enabled && !user.password && !password) {
|
||||||
// Login to an account without password
|
// Login to an account without password
|
||||||
request.session.handle = userHandle;
|
request.session.handle = userHandle;
|
||||||
return true;
|
return true;
|
||||||
|
Reference in New Issue
Block a user