eta357/LibreTunes-Nix-Test
1
0
Fork 0
Code Pull Requests Actions Activity

Prevent arbitrary admin user creation

Browse Source
This commit is contained in:
Ethan Girouard 2024-05-18 20:43:26 -04:00
parent 6ae55d5cfc
commit c27ad19499
Signed by: eta357
GPG Key ID: 7BCDC36DFD11C146
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/auth.rs
View File

@ -21,9 +21,10 @@ use crate::users::UserCredentials;
pub async fn signup(new_user: User) -> Result<(), ServerFnError> { pub async fn signup(new_user: User) -> Result<(), ServerFnError> {
use crate::users::create_user; use crate::users::create_user;
// Ensure the user has no id // Ensure the user has no id, and is not a self-proclaimed admin
let new_user = User { let new_user = User {
id: None, id: None,
admin: false,
..new_user ..new_user
}; };