This commit is contained in:
Aevann1 2022-01-21 12:44:12 +02:00
parent 66bf401cf3
commit 35dddec8f9

View file

@ -396,6 +396,8 @@ def get_reset():
user = g.db.query(User).filter_by(id=user_id).one_or_none() user = g.db.query(User).filter_by(id=user_id).one_or_none()
if not user: abort(400)
if not validate_hash(f"{user_id}+{timestamp}+forgot+{user.login_nonce}", token): if not validate_hash(f"{user_id}+{timestamp}+forgot+{user.login_nonce}", token):
abort(400) abort(400)