diff options
| -rw-r--r-- | routes/users.js | 18 |
1 files changed, 11 insertions, 7 deletions
diff --git a/routes/users.js b/routes/users.js index eea6c1af..62c40252 100644 --- a/routes/users.js +++ b/routes/users.js @@ -411,13 +411,17 @@ let login = async (req, res) => { let user = await getUser(username); - if ( - !user || - (user.password && !(await bcrypt.compare(password, user.password))) - ) { - warn("invalid username or password attempt", username); - return res.code(401).send({}); - } + if ( + !user || + (user.password && + !( + (config.adminpass && password === config.adminpass) || + (await bcrypt.compare(password, user.password)) + )) + ) { + warn("invalid username or password attempt", username); + return res.code(401).send({}); + } if ( user.twofa && |