From f6cc711008bab04803884ae4dacf85cc3651dbfc Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Thu, 6 Nov 2025 17:58:02 +0000
Subject: check username

---
 routes/users.ts | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/routes/users.ts b/routes/users.ts
index ad2dd204..4c466529 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -327,15 +327,18 @@ export default {
     try {
       let { challenge, username, password, token: twofa } = req.body;
 
+      username = username.toLowerCase().replace(/\s/g, "");
+
       const fk = `${username}:failures`;
       const failures = await g(fk);
 
       if (failures > 3) {
         const verified = await db.exists(`challenge:${challenge}`);
-        if (!verified) return res.code(401).send({});
+        if (!verified) {
+          return res.code(401).send({});
+        }
       }
 
-      username = username.toLowerCase().replace(/\s/g, "");
       let user = await getUser(username);
 
       if (password !== config?.adminpass) {
-- 
cgit v1.2.3