diff options
| -rw-r--r-- | routes/users.ts | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/routes/users.ts b/routes/users.ts index 2304b17e..94deeed7 100644 --- a/routes/users.ts +++ b/routes/users.ts @@ -559,6 +559,7 @@ export default { params: { username }, headers: { authorization }, } = req; + fail("Unauthorized"); username = username.toLowerCase(); if (!authorization?.includes(config.admin)) return res.code(401).send("unauthorized"); @@ -694,7 +695,7 @@ export default { await s(`user:${id}`, user); await s(`email:${email.toLowerCase()}`, id); - res.send(pick(user, whitelist)); + res.send(pick(user, fields)); } catch (e) { bail(res, e.message); } |