Require user logged in for POSTing confirm endpoint (#228)

* Require user logged in for POSTing confirm endpoint * Don't use middleware to validate user * Version bump
HackGT · Jul 25, 2018 · 2e11c01 · 2e11c01
1 parent 7ec4f76
commit 2e11c01
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/server/routes/auth.ts b/server/routes/auth.ts
@@ -78,6 +78,11 @@ export async function reloadAuthentication() {
 			response.redirect("/login/confirm");
 			return;
 		}
+		if (!request.isAuthenticated() || !user) {
+			request.flash("error", "Must be logged in");
+			response.redirect("/login");
+			return;
+		}
 		user.name = name.trim();
 
 		let email = request.body.email as string | undefined;