fix: make NNAS middleware only allow Basic tokens on "devices" endpoints

PretendoNetwork · Aug 9, 2024 · 8deca40 · 8deca40
1 parent cbf85fe
commit 8deca40
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/middleware/pnid.ts b/src/middleware/pnid.ts
@@ -20,7 +20,7 @@ async function PNIDMiddleware(request: express.Request, response: express.Respon
 		token = Buffer.from(token, 'hex').toString('base64');
 	}
 
-	if (type === 'Basic') {
+	if (type === 'Basic' && request.path.includes('v1/api/people/@me/devices')) {
 		pnid = await getPNIDByBasicAuth(token);
 	} else if (type === 'Bearer') {
 		// TODO - This "accepted types list" is mostly a hack. Change this