summary refs log tree commit diff
path: root/api/src
diff options
context:
space:
mode:
authorMadeline <46743919+MaddyUnderStars@users.noreply.github.com>2022-07-03 00:02:01 +1000
committerMadeline <46743919+MaddyUnderStars@users.noreply.github.com>2022-07-03 00:02:01 +1000
commit6b8c4c9fa7293849bc05b6391ecb76b356ef04b5 (patch)
treec5d618ab5d7d31ad8b966df896546f6de03ab57b /api/src
parentRevert RateLimit.ts (diff)
downloadserver-6b8c4c9fa7293849bc05b6391ecb76b356ef04b5.tar.xz
Prevent demo user from editing their profile
Diffstat (limited to 'api/src')
-rw-r--r--api/src/routes/users/@me/index.ts3
1 files changed, 3 insertions, 0 deletions
diff --git a/api/src/routes/users/@me/index.ts b/api/src/routes/users/@me/index.ts
index 122080f2..7ab30f03 100644
--- a/api/src/routes/users/@me/index.ts
+++ b/api/src/routes/users/@me/index.ts
@@ -2,6 +2,7 @@ import { Router, Request, Response } from "express";
 import { User, PrivateUserProjection, emitEvent, UserUpdateEvent, handleFile, FieldErrors, adjustEmail } from "@fosscord/util";
 import { route } from "@fosscord/api";
 import bcrypt from "bcrypt";
+import { HTTPError } from "lambert-server";
 
 const router: Router = Router();
 
@@ -29,6 +30,8 @@ router.get("/", route({}), async (req: Request, res: Response) => {
 });
 
 router.patch("/", route({ body: "UserModifySchema" }), async (req: Request, res: Response) => {
+	if (req.user_id === "992772978150273216") throw new HTTPError("Demo user, sorry", 400);
+
 	const body = req.body as UserModifySchema;
 
 	if (body.avatar) body.avatar = await handleFile(`/avatars/${req.user_id}`, body.avatar as string);