ben.carrasco/jambonz-api-server
1
0
Fork 0
mirror of https://github.com/jambonz/jambonz-api-server.git synced 2026-10-04 02:04:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: reject if user.provider !== local when login (#408)

Browse Source
This commit is contained in:
Hoan Luu Huu
2025-04-09 09:53:24 -04:00
committed by GitHub
parent e24f3472ae
commit c144758d44
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/routes/api/login.js
+3
View File
@@ -29,6 +29,9 @@ router.post('/', async(req, res) => {
return res.sendStatus(403); return res.sendStatus(403);
} }
logger.info({r}, 'successfully retrieved user account'); logger.info({r}, 'successfully retrieved user account');
if (r[0].provider !== 'local') {
return res.sendStatus(403);
}
const maxLoginAttempts = process.env.LOGIN_ATTEMPTS_MAX_RETRIES || 6; const maxLoginAttempts = process.env.LOGIN_ATTEMPTS_MAX_RETRIES || 6;
const loginAttempsBlocked = await retrieveKey(`login:${r[0].user_sid}`) >= maxLoginAttempts; const loginAttempsBlocked = await retrieveKey(`login:${r[0].user_sid}`) >= maxLoginAttempts;