monkeytypegame/monkeytype
1
1
Fork 0
mirror of https://github.com/monkeytypegame/monkeytype.git synced 2025-03-05 03:05:03 +08:00
Code Issues Projects Releases Packages Wiki Activity

impr(server): dont allow banned accounts to reset or delete their data

Browse source
This commit is contained in:
Miodec 2024-04-28 16:44:49 +02:00
parent a57b6c272f
commit bfe39c62de
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
backend/src/api/controllers/user.ts
View file

@ -180,6 +180,10 @@ export async function deleteUser(
const userInfo = await UserDAL.getUser(uid, "delete user");
if (userInfo.banned) {
throw new MonkeyError(403, "Banned users cannot delete their account");
}
//cleanup database
await Promise.all([
UserDAL.deleteUser(uid),
@ -211,6 +215,10 @@ export async function resetUser(
const { uid } = req.ctx.decodedToken;
const userInfo = await UserDAL.getUser(uid, "reset user");
if (userInfo.banned) {
throw new MonkeyError(403, "Banned users cannot reset their account");
}
const promises = [
UserDAL.resetUser(uid),
deleteAllApeKeys(uid),