diff --git a/server/src/v1/auth.ts b/server/src/v1/auth.ts index 372e6a798d7dc97907813bf3858c618048e94b91..4bf740090e69f352b962e8cf7d36a714439aa530 100644 --- a/server/src/v1/auth.ts +++ b/server/src/v1/auth.ts @@ -38,7 +38,14 @@ export async function tokenVerification(req: Request, _res: Response, next: Next decoded = await asyncify(verify, token, getSecret(), { algorithms: ["HS384"] }); } if (isOfType<Token>(decoded, [['id', 'string'], ['type', 'string']]) && decoded.type === authTokenType) { - req.body.token = decoded; + const user = await database('users') + .select({ id: 'users.id' }) + .where({ + 'users.id': decoded.id, + }); + if (user.length >= 1) { + req.body.token = decoded; + } } } catch (err) { /* Token has already been deleted */ } next();