Compare commits

...

2 commits

Author SHA1 Message Date
Christopher Cookman 71363b6d11 Fix acl check 2025-08-31 22:46:05 -06:00
Christopher Cookman b67c38cacf Do thing 2025-08-31 22:43:57 -06:00

View file

@ -33,11 +33,10 @@ router.post('/', (req, res) => {
const match = await global.comparePassword(password, user.passwordHash); const match = await global.comparePassword(password, user.passwordHash);
//console.log(match) //console.log(match)
if (!match) return res.status(401).render('login', { error: 'Invalid username or password.' }); if (!match) return res.status(401).render('login', { error: 'Invalid username or password.' });
if (global.checkACL(req, 'login') == false) return res.status(403).render('error', { error: 'You do not have permission to log in.', button: {text:"Go back", action:"back"} });
req.session.user = user;; req.session.user = user;;
res.redirect('/dashboard'); res.redirect('/dashboard');
}).catch(err => { }).catch(err => {
global.log.error(`Database error during login: ${err}`); global.log.error(`Database error during login: ${err.stack}`);
res.status(500).render('login', { error: 'Internal server error.' }); res.status(500).render('login', { error: 'Internal server error.' });
}) })
}); });