CalvinBackup/anonymous_github
1
0
Fork 0
mirror of https://github.com/tdurieux/anonymous_github.git synced 2026-09-12 21:58:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: authorize coauthors by stable GitHub identity

Browse Source
This commit is contained in:
tdurieux
2026-09-06 09:17:01 +02:00
parent 8ec656c201
commit 2af66cd1b6
3 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/server/routes/repository-private.ts
+6 -3
View File
@@ -817,9 +817,12 @@ router.delete(
const user = await getUser(req);
const target = req.params.username;
const isOwner = repo.owner.id === user.model.id;
const isSelf =
!!user.username &&
user.username.toLowerCase() === target.toLowerCase();
const coauthor = (repo.model.coauthors || []).find(
(c) => c.username.toLowerCase() === target.toLowerCase()
);
const isSelf = coauthor?.githubId
? coauthor.githubId === user.model.externalIDs?.github
: !!user.username && user.username.toLowerCase() === target.toLowerCase();
if (!isOwner && !isSelf && !user.isAdmin) {
throw new AnonymousError("not_authorized", { httpStatus: 401 });
}