Leahnaya/sendou.ink
1
0
Fork 0
mirror of https://github.com/Sendouc/sendou.ink.git synced 2026-09-07 03:35:40 -05:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Fix user search endpoint allowing returning all users

Browse Source
This commit is contained in:
Kalle
2025-02-06 09:23:48 +02:00
parent aaf865e8d0
commit 6fc3445fc6
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
app/features/user-page/UserRepository.server.ts
View File

@@ -5,6 +5,7 @@ import { db, sql as dbDirect } from "~/db/sql";
import type { BuildSort, DB, TablesInsertable } from "~/db/tables";
import type { User } from "~/db/types";
import { dateToDatabaseTimestamp } from "~/utils/dates";
import invariant from "~/utils/invariant";
import type { CommonUser } from "~/utils/kysely.server";
import { COMMON_USER_FIELDS } from "~/utils/kysely.server";
import { safeNumberParse } from "~/utils/number";
@@ -521,18 +522,25 @@ export function searchExact(args: {
.leftJoin("PlusTier", "PlusTier.userId", "User.id")
.select(searchSelectedFields);
if (args.id) {
let filtered = false;
if (typeof args.id === "number") {
filtered = true;
query = query.where("User.id", "=", args.id);
}
if (args.discordId) {
if (typeof args.discordId === "string") {
filtered = true;
query = query.where("User.discordId", "=", args.discordId);
}
if (args.customUrl) {
if (typeof args.customUrl === "string") {
filtered = true;
query = query.where("User.customUrl", "=", args.customUrl);
}
invariant(filtered, "No search criteria provided");
return query.execute();
}