mirror/advplyr.audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-06-23 17:29:19 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update:Guest user accounts cannot change the account password #537

Browse source
This commit is contained in:
advplyr 2022-04-29 18:38:13 -05:00
parent 729fdd5c9f
commit 049ae73d74
3 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
server/controllers/MeController.js
View file

@ -133,6 +133,10 @@ class MeController {
// PATCH: api/me/password
updatePassword(req, res) {
if (req.user.isGuest) {
Logger.error(`[MeController] Guest user attempted to change password`, req.user.username)
return res.sendStatus(500)
}
this.auth.userChangePassword(req, res)
}