mirror of
https://github.com/SillyTavern/SillyTavern.git
synced 2025-02-01 11:56:48 +01:00
[bug] Fix basic auto-logins to disabled users
This commit is contained in:
parent
a1352d817a
commit
fe8ffe5be8
@ -674,11 +674,11 @@ async function basicUserLogin(request) {
|
||||
if (login == userHandle) {
|
||||
const user = await storage.getItem(toKey(userHandle));
|
||||
// Verify pass again here just to be sure
|
||||
if (user && user.password && user.password === getPasswordHash(password, user.salt)) {
|
||||
if (user && user.enabled && user.password && user.password === getPasswordHash(password, user.salt)) {
|
||||
request.session.handle = userHandle;
|
||||
return true;
|
||||
}
|
||||
else if (user && !user.password && !password) {
|
||||
else if (user && user.enabled && !user.password && !password) {
|
||||
// Login to an account without password
|
||||
request.session.handle = userHandle;
|
||||
return true;
|
||||
|
Loading…
x
Reference in New Issue
Block a user