heartles/egirlskey
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

return stub user from users/show to unauthorized clients

Browse source
This commit is contained in:
jaina heartles 2024-09-23 19:12:30 -04:00
parent 1989bdea87
commit 9813e2d197
3 changed files with 34 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
packages/backend/src/server/api/endpoints/users/show.ts
View file

@ -16,12 +16,13 @@ import { RoleService } from '@/core/RoleService.js';
import { ApiError } from '../../error.js';
import { ApiLoggerService } from '../../ApiLoggerService.js';
import type { FindOptionsWhere } from 'typeorm';
import type { Config } from '@/config.js';
export const meta = {
tags: ['users'],
requireCredential: false,
requireCredentialSecureMode: true,
requireCredentialSecureMode: false, // Handle secure mode below
description: 'Show the properties of a user.',
@ -83,6 +84,9 @@ export const paramDef = {
@Injectable()
export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-disable-line import/no-default-export
constructor(
@Inject(DI.config)
private config: Config,
@Inject(DI.usersRepository)
private usersRepository: UsersRepository,
@ -148,8 +152,10 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
}
}
const allowRequest = me != null || !this.config.secureApiMode;
return await this.userEntityService.pack(user, me, {
schema: 'UserDetailed',
schema: allowRequest ? 'UserDetailed' : 'UserLogin',
});
}
});