他人のアクセストークンはrevoke出来ないように

mei23 · Jul 12, 2021 · 93d9df0 · 93d9df0
1 parent b028c36
commit 93d9df0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/server/api/endpoints/i/revoke-token.ts b/src/server/api/endpoints/i/revoke-token.ts
@@ -23,6 +23,7 @@ export const meta = {
 
 export default define(meta, async (ps, user) => {
 	await AccessToken.remove({
-		_id: ps.tokenId
+		_id: ps.tokenId,
+		userId: user._id
 	});
 });