calvin.erfmann/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-09-01 16:59:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

resolve security-key login only for a unique internal user

Browse Source
This commit is contained in:
miloschwartz
2026-08-31 14:39:36 -04:00
parent 8aef14cf9f
commit 39722d30af
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/routers/auth/securityKey.ts
+9 -4
View File
@@ -533,18 +533,23 @@ export async function startAuthentication(
// If email is provided, get security keys for that specific user // If email is provided, get security keys for that specific user
if (email) { if (email) {
const [user] = await db const matchingUsers = await db
.select() .select()
.from(users) .from(users)
.where(eq(users.email, email)) .where(
.limit(1); and(
eq(users.email, email.toLowerCase()),
eq(users.type, UserType.Internal)
)
);
if (!user || user.type !== UserType.Internal) { if (matchingUsers.length !== 1) {
return next( return next(
createHttpError(HttpCode.BAD_REQUEST, "Invalid credentials") createHttpError(HttpCode.BAD_REQUEST, "Invalid credentials")
); );
} }
const user = matchingUsers[0];
userId = user.userId; userId = user.userId;
const userSecurityKeys = await db const userSecurityKeys = await db