woj/woj-server
1
0
Fork 0
Code Issues 2 Pull Requests Packages Projects Releases Wiki Activity

fix: api/user/profile: logged in users are able to get user profile

Browse Source
This commit is contained in:
Paul Pan 2024-03-16 22:00:37 +08:00
parent 3cfa0938e6
commit 6a28761e73
Signed by: Paul
GPG Key ID: D639BDF5BA578AF4
1 changed files with 1 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
internal/api/user/profile.go
View File

@ -29,7 +29,7 @@ func (h *handler) Profile(c *gin.Context) {
}
uid := claim.(*model.Claim).UID
role := claim.(*model.Claim).Role
// role := claim.(*model.Claim).Role
req := new(profileRequest)
if err := c.ShouldBind(req); err != nil {
@ -43,10 +43,5 @@ func (h *handler) Profile(c *gin.Context) {
return
}
if role < model.RoleAdmin && user.ID != uid {
e.Pong[any](c, e.UserUnauthorized, nil)
return
}
e.Pong(c, status, user)
}