From a7e6b766be6b30b37839beb13f31d96b141cc25a Mon Sep 17 00:00:00 2001 From: syuilo Date: Fri, 2 Nov 2018 12:49:08 +0900 Subject: Resolve #2623 --- src/server/api/endpoints/auth/accept.ts | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) (limited to 'src/server/api/endpoints/auth/accept.ts') diff --git a/src/server/api/endpoints/auth/accept.ts b/src/server/api/endpoints/auth/accept.ts index fee68a20a6..ed1c2fa390 100644 --- a/src/server/api/endpoints/auth/accept.ts +++ b/src/server/api/endpoints/auth/accept.ts @@ -5,23 +5,27 @@ import App from '../../../../models/app'; import AuthSess from '../../../../models/auth-session'; import AccessToken from '../../../../models/access-token'; import { ILocalUser } from '../../../../models/user'; +import getParams from '../../get-params'; export const meta = { requireCredential: true, - secure: true + + secure: true, + + params: { + token: { + validator: $.str + } + } }; -/** - * Accept - */ export default (params: any, user: ILocalUser) => new Promise(async (res, rej) => { - // Get 'token' parameter - const [token, tokenErr] = $.str.get(params.token); - if (tokenErr) return rej('invalid token param'); + const [ps, psErr] = getParams(meta, params); + if (psErr) return rej(psErr); // Fetch token const session = await AuthSess - .findOne({ token: token }); + .findOne({ token: ps.token }); if (session === null) { return rej('session not found'); -- cgit v1.2.3-freya