From ce502876eb0057e35ef0bce108337988223c792e Mon Sep 17 00:00:00 2001 From: Freya Murphy Date: Mon, 2 Mar 2026 08:33:53 -0500 Subject: allow vanity urls --- packages/backend/src/server/WellKnownServerService.ts | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) (limited to 'packages/backend/src/server/WellKnownServerService.ts') diff --git a/packages/backend/src/server/WellKnownServerService.ts b/packages/backend/src/server/WellKnownServerService.ts index f48310c50f..5770aac73b 100644 --- a/packages/backend/src/server/WellKnownServerService.ts +++ b/packages/backend/src/server/WellKnownServerService.ts @@ -136,12 +136,16 @@ fastify.get('/.well-known/change-password', async (request, reply) => { resource.startsWith('acct:') ? resource.slice('acct:'.length) : resource)); - const fromAcct = (acct: Acct.Acct): FindOptionsWhere | number => - !acct.host || acct.host === this.config.host.toLowerCase() ? { + const fromAcct = (acct: Acct.Acct): FindOptionsWhere | number => { + if (acct.host && acct.host !== this.config.host.toLowerCase() && !this.config.allowedHosts.includes(acct.host)) + return 422; + + return { usernameLower: acct.username.toLowerCase(), host: IsNull(), isSuspended: false, - } : 422; + } + } if (typeof request.query.resource !== 'string') { reply.code(400); -- cgit v1.2.3-freya