fix(usernames): filter @ on server side for username lookup

HabitRPG · Nov 13, 2018 · d691dee · d691dee
1 parent 481bd67
commit d691dee
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/website/server/controllers/api-v3/members.js b/website/server/controllers/api-v3/members.js
@@ -130,13 +130,14 @@ api.getMemberByUsername = {
     if (validationErrors) throw validationErrors;
 
     let username = req.params.username.toLowerCase();
+    if (username[0] === '@') username = username.slice(1, username.length);
 
     let member = await User
       .findOne({'auth.local.lowerCaseUsername': username, 'flags.verifiedUsername': true})
       .select(memberFields)
       .exec();
 
-    if (!member || !member.flags.verifiedUsername) throw new NotFound(res.t('userNotFound'));
+    if (!member) throw new NotFound(res.t('userNotFound'));
 
     // manually call toJSON with minimize: true so empty paths aren't returned
     let memberToJSON = member.toJSON({minimize: true});