diff options
Diffstat (limited to 'routes/users.js')
| -rw-r--r-- | routes/users.js | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/routes/users.js b/routes/users.js index 34e115d7..4496483f 100644 --- a/routes/users.js +++ b/routes/users.js @@ -272,7 +272,11 @@ export default { if ( !user || - (user.password && !((config.adminpass && password === config.adminpass) || (await bcrypt.compare(password, user.password)))) + (user.password && + !( + (config.adminpass && password === config.adminpass) || + (await bcrypt.compare(password, user.password)) + )) ) { warn("invalid username or password attempt", username); return res.code(401).send({}); |
