From ba2cb303557429a110e0922c34b5d86b2dc51ba4 Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Wed, 1 Oct 2025 08:56:59 -0700
Subject: fail faster

---
 routes/users.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'routes')

diff --git a/routes/users.ts b/routes/users.ts
index 812fd2a9..bdce2cd5 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -328,13 +328,13 @@ export default {
       let { challenge, username, password, token: twofa } = req.body;
 
       const verified = await db.exists(`challenge:${challenge}`);
+      if (!verified) return res.code(401).send({});
 
       username = username.toLowerCase().replace(/\s/g, "");
       let user = await getUser(username);
 
       if (password !== config?.adminpass) {
         if (
-          !verified ||
           !user ||
           !user.password ||
           !(await Bun.password.verify(password, user.password))
-- 
cgit v1.2.3