improve checks for update user api

2023-04-05 21:02:49 +08:00
parent d98efb39dc
commit 2fadce8ae1
1 changed files with 5 additions and 0 deletions
--- a/server/src/controllers/auth.controller.ts
+++ b/server/src/controllers/auth.controller.ts
@@ -239,6 +239,11 @@ export const updateUser = async (req: Request, res: Response) => {
            return;
        }

+        if (!req.body.name && !req.body.email && !req.body.password) {
+            res.status(400).end();
+            return;
+        }
+
        const name = xss(req.body.name || req.session.user.name);
        const pattern = /^[A-Za-z0-9]+$/;
        if (!pattern.test(name)) {