Fix(settings): prevent non user from hitting delete page

2016-09-01 15:40:32 -07:00
parent b17d6c37f2
commit 7509041511
1 changed files with 5 additions and 1 deletions
--- a/server/boot/user.js
+++ b/server/boot/user.js
@@ -167,7 +167,11 @@ module.exports = function(app) {
  router.get('/email-signin', getEmailSignin);
  router.get('/deprecated-signin', getDepSignin);
  router.get('/update-email', getUpdateEmail);
-  router.get('/delete-my-account', showDelete);
+  router.get(
+    '/delete-my-account',
+    sendNonUserToMap,
+    showDelete
+  );
  api.post(
    '/account/delete',
    ifNoUser401,