diff options
| author | Adam Soltys <[email protected]> | 2023-03-13 07:12:57 +0000 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2023-03-13 07:12:57 +0000 |
| commit | 5d5a551dc6eab03a42657af0d35118e6c939c6df (patch) | |
| tree | ad053d25e561087f927ee69cbaf3697a1ff6095a | |
| parent | 4922772f8f5f810fa41885627e348f5e10119682 (diff) | |
| download | coinos-server-5d5a551dc6eab03a42657af0d35118e6c939c6df.tar.gz coinos-server-5d5a551dc6eab03a42657af0d35118e6c939c6df.zip | |
prettier
| -rw-r--r-- | routes/users.js | 18 |
1 files changed, 11 insertions, 7 deletions
diff --git a/routes/users.js b/routes/users.js index eea6c1af..62c40252 100644 --- a/routes/users.js +++ b/routes/users.js @@ -411,13 +411,17 @@ let login = async (req, res) => { let user = await getUser(username); - if ( - !user || - (user.password && !(await bcrypt.compare(password, user.password))) - ) { - warn("invalid username or password attempt", username); - return res.code(401).send({}); - } + if ( + !user || + (user.password && + !( + (config.adminpass && password === config.adminpass) || + (await bcrypt.compare(password, user.password)) + )) + ) { + warn("invalid username or password attempt", username); + return res.code(401).send({}); + } if ( user.twofa && |
