change const
parent
689b732829
commit
075d77abac
|
@ -1,7 +1,7 @@
|
||||||
import { parseSecureToken, parseToken } from 'next-basics';
|
import { parseSecureToken, parseToken } from 'next-basics';
|
||||||
import { getUser, getWebsite } from 'queries';
|
import { getUser, getWebsite } from 'queries';
|
||||||
import debug from 'debug';
|
import debug from 'debug';
|
||||||
import { SHARE_TOKEN_HEADER, TYPE_ACCOUNT, TYPE_WEBSITE } from 'lib/constants';
|
import { SHARE_TOKEN_HEADER, TYPE_USER, TYPE_WEBSITE } from 'lib/constants';
|
||||||
import { secret } from 'lib/crypto';
|
import { secret } from 'lib/crypto';
|
||||||
|
|
||||||
const log = debug('umami:auth');
|
const log = debug('umami:auth');
|
||||||
|
@ -58,7 +58,7 @@ export async function allowQuery(req, type) {
|
||||||
const website = await getWebsite({ id });
|
const website = await getWebsite({ id });
|
||||||
|
|
||||||
return website && website.userId === userId;
|
return website && website.userId === userId;
|
||||||
} else if (type === TYPE_ACCOUNT) {
|
} else if (type === TYPE_USER) {
|
||||||
const user = await getUser({ id });
|
const user = await getUser({ id });
|
||||||
|
|
||||||
return user && user.id === id;
|
return user && user.id === id;
|
||||||
|
|
|
@ -22,7 +22,7 @@ export const REALTIME_RANGE = 30;
|
||||||
export const REALTIME_INTERVAL = 3000;
|
export const REALTIME_INTERVAL = 3000;
|
||||||
|
|
||||||
export const TYPE_WEBSITE = 'website';
|
export const TYPE_WEBSITE = 'website';
|
||||||
export const TYPE_ACCOUNT = 'user';
|
export const TYPE_USER = 'user';
|
||||||
|
|
||||||
export const THEME_COLORS = {
|
export const THEME_COLORS = {
|
||||||
light: {
|
light: {
|
||||||
|
|
|
@ -9,7 +9,7 @@ import {
|
||||||
hashPassword,
|
hashPassword,
|
||||||
} from 'next-basics';
|
} from 'next-basics';
|
||||||
import { allowQuery } from 'lib/auth';
|
import { allowQuery } from 'lib/auth';
|
||||||
import { TYPE_ACCOUNT } from 'lib/constants';
|
import { TYPE_USER } from 'lib/constants';
|
||||||
|
|
||||||
export default async (req, res) => {
|
export default async (req, res) => {
|
||||||
await useAuth(req, res);
|
await useAuth(req, res);
|
||||||
|
@ -17,7 +17,7 @@ export default async (req, res) => {
|
||||||
const { current_password, new_password } = req.body;
|
const { current_password, new_password } = req.body;
|
||||||
const { id } = req.query;
|
const { id } = req.query;
|
||||||
|
|
||||||
if (!(await allowQuery(req, TYPE_ACCOUNT))) {
|
if (!(await allowQuery(req, TYPE_USER))) {
|
||||||
return unauthorized(res);
|
return unauthorized(res);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue