MH.Dmitrii/auth-project
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix self email check bug

Browse Source
This commit is contained in:
Dmitrii Seliakov
2026-07-13 09:25:34 +03:00
parent 2cf89fc5e6
commit eeb634bbae
2 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
DB/database.db
View File

Binary file not shown.

16
src/service/crud_actions/crud.py
View File

@@ -103,13 +103,6 @@ class CrudActions:
if not is_admin and "admin" in permission_names: #check for escalating permissions if not is_admin and "admin" in permission_names: #check for escalating permissions
raise errors.forbidden_error(detail="You can't update user with admin permissions") raise errors.forbidden_error(detail="You can't update user with admin permissions")
if self.DB.get_user_by_email(email=user_info["email"]):
raise errors.forbidden_error(detail="You can't use this email")
plain_password = user_info.pop("plain_password", None)
if plain_password is not None:
user_info["hashed_password"] = self.hashes.plain_to_hash(plain_password) #re-hash password
target_id = user_info.pop("target_id", None) target_id = user_info.pop("target_id", None)
if target_id is None: if target_id is None:
current_user_info = self.DB.get_user_by_email(email=current_user.email) current_user_info = self.DB.get_user_by_email(email=current_user.email)
@@ -119,6 +112,15 @@ class CrudActions:
user_info["id"] = target_id user_info["id"] = target_id
if "email" in user_info:
existing = self.DB.get_user_by_email(email=user_info["email"])
if existing and existing.id != target_id:
raise errors.forbidden_error(detail="You can't use this email")
plain_password = user_info.pop("plain_password", None)
if plain_password is not None:
user_info["hashed_password"] = self.hashes.plain_to_hash(plain_password) #re-hash password
user = self.DB.update_user(data=user_info, permission_names=permission_names) user = self.DB.update_user(data=user_info, permission_names=permission_names)
if user is None: if user is None: