block external profiles for unregistered users

2025-10-05 12:46:02 +02:00
parent 84d9f2483e
commit 237225f10b
1 changed files with 1 additions and 1 deletions
--- a/web/src/routes/api/v1/profile/[handle]/+server.ts
+++ b/web/src/routes/api/v1/profile/[handle]/+server.ts
@@ -10,7 +10,7 @@ export async function GET(event: RequestEvent) {
        return error(400, { message: "Bad request" })
    }

-    if(splitUsername(handle)[1] !== env.ORIGIN && !event.locals.user) {
+    if(splitUsername(handle)[1] !== undefined && !event.locals.user) {
        return error(401, { message: "Unauthorized" })
    }