OpenWF/SpaceNinjaServer
28
29
Fork 35
Code Issues 23 Pull Requests 1 Actions Packages Projects Releases Activity

chore: don't validate Nonce in query #1341

Merged
Sainan merged 1 commits from easy-query into main 2025-03-27 03:33:28 -07:00
Conversation 0 Commits 1 Files Changed 1 +2 -5
1 changed files with 2 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/services/loginService.ts
View File

@ -74,11 +74,8 @@ export const getAccountForRequest = async (req: Request): Promise<TAccountDocume
throw new Error("Request is missing nonce parameter");
}
const account = await Account.findOne({
_id: req.query.accountId,
Nonce: nonce
});
if (!account) {
const account = await Account.findById(req.query.accountId);
if (!account || account.Nonce != nonce) {
throw new Error("Invalid accountId-nonce pair");
}
if (account.Dropped && req.query.ct) {