block external profiles for unregistered users

This commit is contained in:
Christian Beutel
2025-10-05 12:46:02 +02:00
parent 84d9f2483e
commit 237225f10b

View File

@@ -10,7 +10,7 @@ export async function GET(event: RequestEvent) {
return error(400, { message: "Bad request" }) return error(400, { message: "Bad request" })
} }
if(splitUsername(handle)[1] !== env.ORIGIN && !event.locals.user) { if(splitUsername(handle)[1] !== undefined && !event.locals.user) {
return error(401, { message: "Unauthorized" }) return error(401, { message: "Unauthorized" })
} }