mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-12-20 15:30:39 +01:00
fix: improper override of req.body.username in login logic
This commit is contained in:
@@ -234,7 +234,10 @@ authenticationController.login = async (req, res, next) => {
|
||||
user.getUsernameByEmail(req.body.username, next);
|
||||
},
|
||||
function (username, next) {
|
||||
req.body.username = username || req.body.username;
|
||||
if (username !== '[[global:guest]]') {
|
||||
req.body.username = username;
|
||||
}
|
||||
|
||||
(res.locals.continueLogin || continueLogin)(strategy, req, res, next);
|
||||
},
|
||||
], next);
|
||||
|
||||
Reference in New Issue
Block a user