diff options
| author | Hazel K <acomputerdog@gmail.com> | 2024-10-07 14:58:39 -0400 |
|---|---|---|
| committer | Hazel K <acomputerdog@gmail.com> | 2024-10-07 14:58:39 -0400 |
| commit | cd9bce307218c864608a0e60cb5f74262bf10d0c (patch) | |
| tree | 67a57666a604834637160ffcd3c39217dac91803 /packages/backend/src/server/api/endpoints/admin | |
| parent | Merge branch 'develop' into hazelnoot/625-protect-system-accounts (diff) | |
| download | sharkey-cd9bce307218c864608a0e60cb5f74262bf10d0c.tar.gz sharkey-cd9bce307218c864608a0e60cb5f74262bf10d0c.tar.bz2 sharkey-cd9bce307218c864608a0e60cb5f74262bf10d0c.zip | |
prevent login and password reset for system accounts
Diffstat (limited to 'packages/backend/src/server/api/endpoints/admin')
| -rw-r--r-- | packages/backend/src/server/api/endpoints/admin/reset-password.ts | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/packages/backend/src/server/api/endpoints/admin/reset-password.ts b/packages/backend/src/server/api/endpoints/admin/reset-password.ts index 828dbae712..e4bb545f5d 100644 --- a/packages/backend/src/server/api/endpoints/admin/reset-password.ts +++ b/packages/backend/src/server/api/endpoints/admin/reset-password.ts @@ -11,6 +11,7 @@ import type { UsersRepository, UserProfilesRepository } from '@/models/_.js'; import { DI } from '@/di-symbols.js'; import { secureRndstr } from '@/misc/secure-rndstr.js'; import { ModerationLogService } from '@/core/ModerationLogService.js'; +import { isSystemAccount } from '@/misc/is-system-account.js'; export const meta = { tags: ['admin'], @@ -63,6 +64,10 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint- throw new Error('cannot reset password of root'); } + if (isSystemAccount(user)) { + throw new Error('cannot reset password of system account'); + } + const passwd = secureRndstr(8); // Generate hash of password |