summaryrefslogtreecommitdiff
path: root/packages/backend/src/server
diff options
context:
space:
mode:
authorFreya Murphy <freya@freyacat.org>2026-03-02 08:33:53 -0500
committerFreya Murphy <freya@freyacat.org>2026-03-02 08:33:53 -0500
commitce502876eb0057e35ef0bce108337988223c792e (patch)
treeb95e1dac6b08bd863888dc482c29b3bc6b26bd4b /packages/backend/src/server
parentmerge: Release/2025.4.5 (!1258) (diff)
downloadsharkey-ce502876eb0057e35ef0bce108337988223c792e.tar.gz
sharkey-ce502876eb0057e35ef0bce108337988223c792e.tar.bz2
sharkey-ce502876eb0057e35ef0bce108337988223c792e.zip
allow vanity urls
Diffstat (limited to 'packages/backend/src/server')
-rw-r--r--packages/backend/src/server/WellKnownServerService.ts10
1 files changed, 7 insertions, 3 deletions
diff --git a/packages/backend/src/server/WellKnownServerService.ts b/packages/backend/src/server/WellKnownServerService.ts
index f48310c50f..5770aac73b 100644
--- a/packages/backend/src/server/WellKnownServerService.ts
+++ b/packages/backend/src/server/WellKnownServerService.ts
@@ -136,12 +136,16 @@ fastify.get('/.well-known/change-password', async (request, reply) => {
resource.startsWith('acct:') ? resource.slice('acct:'.length) :
resource));
- const fromAcct = (acct: Acct.Acct): FindOptionsWhere<MiUser> | number =>
- !acct.host || acct.host === this.config.host.toLowerCase() ? {
+ const fromAcct = (acct: Acct.Acct): FindOptionsWhere<MiUser> | number => {
+ if (acct.host && acct.host !== this.config.host.toLowerCase() && !this.config.allowedHosts.includes(acct.host))
+ return 422;
+
+ return {
usernameLower: acct.username.toLowerCase(),
host: IsNull(),
isSuspended: false,
- } : 422;
+ }
+ }
if (typeof request.query.resource !== 'string') {
reply.code(400);