fix: return 403 on authy endpoints when user disabled

HemmeligOrg · Sep 12, 2024 · ec1e4dc · ec1e4dc
1 parent f03ddaf
commit ec1e4dc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/prehandlers/disable-users.js b/server/prehandlers/disable-users.js
@@ -7,7 +7,7 @@ const errorMessage = 'Access denied. You are not allowed create or sign in users
 export default async function disableUserHandler(request, reply) {
     const { url } = request;
 
-    if (adminSettings.get('disable_users') && (!authRegex.test(url) || !accountRegex.test(url))) {
+    if (adminSettings.get('disable_users') && (authRegex.test(url) || accountRegex.test(url))) {
         return reply.code(403).send({ error: errorMessage });
     }
 }