summary refs log tree commit diff
path: root/src/api/routes/users
diff options
context:
space:
mode:
authorMathMan05 <mathmanrm@gmail.com>2025-10-30 17:19:43 -0500
committerMathMan05 <mathmanrm@gmail.com>2025-10-30 18:10:16 -0500
commit7c26fc59190cb7fd9e66dadc6b1bfe3abc65d608 (patch)
tree207962b81180501338a3aff1b81093113b0dcd86 /src/api/routes/users
parentMerge pull request #1371 from CyberL1/fix/interaction-component-checks (diff)
downloadserver-ts-7c26fc59190cb7fd9e66dadc6b1bfe3abc65d608.tar.xz
fix full user object being exposed
Diffstat (limited to 'src/api/routes/users')
-rw-r--r--src/api/routes/users/@me/guilds.ts26
1 files changed, 5 insertions, 21 deletions
diff --git a/src/api/routes/users/@me/guilds.ts b/src/api/routes/users/@me/guilds.ts

index 78adbbd4..701e6604 100644 --- a/src/api/routes/users/@me/guilds.ts +++ b/src/api/routes/users/@me/guilds.ts
@@ -17,15 +17,7 @@ */ import { route } from "@spacebar/api"; -import { - Config, - Guild, - GuildDeleteEvent, - GuildMemberRemoveEvent, - Member, - User, - emitEvent, -} from "@spacebar/util"; +import { Config, Guild, GuildDeleteEvent, GuildMemberRemoveEvent, Member, User, emitEvent } from "@spacebar/util"; import { Request, Response, Router } from "express"; import { HTTPError } from "lambert-server"; @@ -79,17 +71,9 @@ router.delete( }); if (!guild) throw new HTTPError("Guild doesn't exist", 404); - if (guild.owner_id === req.user_id) - throw new HTTPError("You can't leave your own guild", 400); - if ( - autoJoin.enabled && - autoJoin.guilds.includes(guild_id) && - !autoJoin.canLeave - ) { - throw new HTTPError( - "You can't leave instance auto join guilds", - 400, - ); + if (guild.owner_id === req.user_id) throw new HTTPError("You can't leave your own guild", 400); + if (autoJoin.enabled && autoJoin.guilds.includes(guild_id) && !autoJoin.canLeave) { + throw new HTTPError("You can't leave instance auto join guilds", 400); } await Promise.all([ @@ -109,7 +93,7 @@ router.delete( event: "GUILD_MEMBER_REMOVE", data: { guild_id: guild_id, - user: user, + user: user.toPublicUser(), }, guild_id: guild_id, } as GuildMemberRemoveEvent);