Merge branch 'master' into remotebrowsers

louislam · Oct 21, 2023 · 58233fc · 58233fc
2 parents f93a781 + 87b2e45
commit 58233fc
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/server/server.js b/server/server.js
@@ -319,12 +319,12 @@ let needSetup = false;
                     decoded.username,
                 ]);
 
-                // Check if the password changed
-                if (decoded.h !== shake256(user.password, SHAKE256_LENGTH)) {
-                    throw new Error("The token is invalid due to password change or old token");
-                }
-
                 if (user) {
+                    // Check if the password changed
+                    if (decoded.h !== shake256(user.password, SHAKE256_LENGTH)) {
+                        throw new Error("The token is invalid due to password change or old token");
+                    }
+
                     log.debug("auth", "afterLogin");
                     afterLogin(socket, user);
                     log.debug("auth", "afterLogin ok");