fix token checking

This commit is contained in:
Enstrayed
2025-11-15 16:25:13 -08:00
parent 3af3c76678
commit f8d5d4a69b

View File

@@ -33,7 +33,7 @@ async function checkTokenNew(request, scope) {
if (!request.cookies["APIToken"] && !request.get("Authorization")) { if (!request.cookies["APIToken"] && !request.get("Authorization")) {
return { result: false, owner: "", ownerId: "" } return { result: false, owner: "", ownerId: "" }
} else { } else {
return await db`select s.*, u.username from sessions s join users u on s.owner = u.id where s.token = ${request.get("Authorization") ?? request.cookies["APIToken"]}`.then(response => { return await db`select * from sessions where token = ${request.get("Authorization") ?? request.cookies["APIToken"]}`.then(response => {
if (response.length === 0) { if (response.length === 0) {
return { result: false, owner: response[0]?.username, ownerId: response[0]?.owner } return { result: false, owner: response[0]?.username, ownerId: response[0]?.owner }
} else if (response[0]?.scopes.split(",").includes(scope)) { } else if (response[0]?.scopes.split(",").includes(scope)) {