diff options
Diffstat (limited to 'src/api/structures')
| -rw-r--r-- | src/api/structures/Route.js | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/api/structures/Route.js b/src/api/structures/Route.js index 60c8b06..a359488 100644 --- a/src/api/structures/Route.js +++ b/src/api/structures/Route.js @@ -33,7 +33,7 @@ class Route { return JWT.verify(token, process.env.SECRET, async (error, decoded) => { if (error) { log.error(error); - return res.status(401).json({ message: 'Your token appears to be invalid' }); + return res.status(401).json({ message: 'Invalid token' }); } const id = decoded ? decoded.sub : ''; const iat = decoded ? decoded.iat : ''; @@ -42,6 +42,7 @@ class Route { if (!user) return res.status(401).json({ message: 'Invalid authorization' }); if (iat && iat < moment(user.passwordEditedAt).format('x')) return res.status(401).json({ message: 'Token expired' }); if (!user.enabled) return res.status(401).json({ message: 'This account has been disabled' }); + if (this.options.adminOnly && !user.isAdmin) return res.status(401).json({ message: 'Invalid authorization' }); return this.run(req, res, db, user); }); |