Fix security requirement

This commit is contained in:
Matej Bačo
2025-12-23 12:09:07 +01:00
parent 6f7cca7d68
commit b0bd9e5b78
+3 -3
View File
@@ -433,9 +433,9 @@ App::setResource('user', function (string $mode, Document $project, Document $co
// Account based on account API key
$accountKey = $request->getHeader('x-appwrite-key', '');
$accountKeyId = $request->getHeader('x-appwrite-user', '');
if (!empty($accountKeyId) && !empty($accountKey)) {
$accountKeyUser = Authorization::skip(fn () => $dbForPlatform->getDocument('users', $accountKeyId));
$accountKeyUserId = $request->getHeader('x-appwrite-user', '');
if (!empty($accountKeyUserId) && !empty($accountKey)) {
$accountKeyUser = Authorization::skip(fn () => $dbForPlatform->getDocument('users', $accountKeyUserId));
if (!$accountKeyUser->isEmpty()) {
$key = $accountKeyUser->find(
key: 'secret',