mirror of
https://github.com/louislam/uptime-kuma.git
synced 2024-10-29 18:50:39 +00:00
Check if the password changed when user is not null
This commit is contained in:
parent
e64bf0e3fe
commit
1a862e47ab
1 changed files with 5 additions and 5 deletions
|
@ -299,12 +299,12 @@ let needSetup = false;
|
|||
decoded.username,
|
||||
]);
|
||||
|
||||
if (user) {
|
||||
// Check if the password changed
|
||||
if (decoded.h !== shake256(user.password, SHAKE256_LENGTH)) {
|
||||
throw new Error("The token is invalid due to password change or old token");
|
||||
}
|
||||
|
||||
if (user) {
|
||||
log.debug("auth", "afterLogin");
|
||||
afterLogin(socket, user);
|
||||
log.debug("auth", "afterLogin ok");
|
||||
|
|
Loading…
Reference in a new issue