add missing valid pve token check to checkAuth

2024-07-08 19:25:23 +00:00
parent 800033c6f8
commit 8f7ea51787
6 changed files with 42 additions and 12 deletions
--- a/src/routes/access.js
+++ b/src/routes/access.js
@@ -115,6 +115,12 @@ router.post("/password", async (req, res) => {
 		password: req.body.password
 	};

+	// check auth
+	const auth = await checkAuth(req.cookies, res);
+	if (!auth) {
+		return;
+	}
+
 	const userObj = global.utils.getUserObjFromUsername(params.username);
 	const newAttributes = {
 		userpassword: params.password