tronnet/ProxmoxAAS-API
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

fix bug in disk routes using getUserObjFromUsername

Browse Source
This commit is contained in:
Arthur Lu
2026-05-31 02:37:23 +00:00
parent ca1041ca16
commit f64c8899fe
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/routes/cluster/disk.js
+9 -6
View File
@@ -140,9 +140,9 @@ router.post("/:disk/resize", async (req, res) => {
};
// attempt to parse user from username
const userObj = global.utils.getUserObjFromUsername(params.username);
const userObj = global.utils.getUserObjFromUsername(req.cookies.username);
if (userObj == null) {
res.status(400).send({ auth:true, error:`username ${params.username} does not match format uid@realm.` });
res.status(400).send({ auth:true, error:`username ${req.cookies.username} does not match format uid@realm.` });
}
// check auth for specific instance
@@ -211,9 +211,9 @@ router.post("/:disk/move", async (req, res) => {
};
// attempt to parse user from username
const userObj = global.utils.getUserObjFromUsername(params.username);
const userObj = global.utils.getUserObjFromUsername(req.cookies.username);
if (userObj == null) {
res.status(400).send({ auth:true, error:`username ${params.username} does not match format uid@realm.` });
res.status(400).send({ auth:true, error:`username ${req.cookies.username} does not match format uid@realm.` });
}
// check auth for specific instance
@@ -337,10 +337,13 @@ router.post("/:disk/create", async (req, res) => {
iso: req.body.iso
};
console.log(req.cookies)
// attempt to parse user from username
const userObj = global.utils.getUserObjFromUsername(params.username);
const userObj = global.utils.getUserObjFromUsername(req.cookies.username);
if (userObj == null) {
res.status(400).send({ auth:true, error:`username ${params.username} does not match format uid@realm.` });
res.status(400).send({ auth:true, error:`username ${req.cookies.username} does not match format uid@realm.` });
return;
}
// check auth for specific instance