4ev-link/4ev.link
1
0
Fork 0
mirror of https://github.com/4ev-link/4ev.link.git synced 2026-01-14 08:38:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Add ban check

Browse Source
This commit is contained in:
multipleof4
2025-11-28 08:01:07 -08:00
parent b0f557eedc
commit 091cb9a4db
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
functions/api/signin.js
View File

@@ -30,12 +30,17 @@ export async function onRequestPost({ request, env }) {
return new Response("Missing fields",{ status:400 }); return new Response("Missing fields",{ status:400 });
const user = await env.D1_EV const user = await env.D1_EV
.prepare("SELECT pass_hash FROM users WHERE username = ?") .prepare("SELECT pass_hash, banned_until FROM users WHERE username = ?")
.bind(username) .bind(username)
.first(); .first();
if (user?.pass_hash !== pass_hash) if (user?.pass_hash !== pass_hash)
return new Response("Invalid credentials",{ status:401 }); return new Response("Invalid credentials",{ status:401 });
if (user.banned_until && user.banned_until > Date.now()) {
const days = Math.ceil((user.banned_until - Date.now()) / 86400000);
return new Response(`Account banned for ${days} more days.`, { status: 403 });
}
await ntfy( await ntfy(
env, env,
"auth-login", "auth-login",