Fix(settings): prevent non user from hitting delete page
This commit is contained in:
@@ -167,7 +167,11 @@ module.exports = function(app) {
|
|||||||
router.get('/email-signin', getEmailSignin);
|
router.get('/email-signin', getEmailSignin);
|
||||||
router.get('/deprecated-signin', getDepSignin);
|
router.get('/deprecated-signin', getDepSignin);
|
||||||
router.get('/update-email', getUpdateEmail);
|
router.get('/update-email', getUpdateEmail);
|
||||||
router.get('/delete-my-account', showDelete);
|
router.get(
|
||||||
|
'/delete-my-account',
|
||||||
|
sendNonUserToMap,
|
||||||
|
showDelete
|
||||||
|
);
|
||||||
api.post(
|
api.post(
|
||||||
'/account/delete',
|
'/account/delete',
|
||||||
ifNoUser401,
|
ifNoUser401,
|
||||||
|
Reference in New Issue
Block a user