Infrastructure/zipline
1
Fork 0
Code Issues Pull requests Activity

fix(api): fixed being able to override user (#98)

Browse source
This commit is contained in:
diced 2021-09-08 20:56:47 -07:00
commit ece3e16459
No known key found for this signature in database
GPG key ID: 85AB64C74535D76E
1 changed files with 15 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
src/pages/api/user/index.ts
View file

@ -16,10 +16,20 @@ async function handler(req: NextApiReq, res: NextApiRes) {
});
}
if (req.body.username) await prisma.user.update({
where: { id: user.id },
data: { username: req.body.username }
});
if (req.body.username) {
const existing = await prisma.user.findFirst({
where: {
username: req.body.username
}
});
if (existing && user.username !== req.body.username) {
return res.forbid('Username is already taken');
}
await prisma.user.update({
where: { id: user.id },
data: { username: req.body.username }
});
}
if (req.body.embedTitle) await prisma.user.update({
where: { id: user.id },
@ -82,4 +92,4 @@ async function handler(req: NextApiReq, res: NextApiRes) {
}
}
export default withZipline(handler);
export default withZipline(handler);