From b0bd9e5b78ded2f0cac989bb7f7ef572265406dc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Matej=20Ba=C4=8Do?= Date: Tue, 23 Dec 2025 12:09:07 +0100 Subject: [PATCH] Fix security requirement --- app/init/resources.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/init/resources.php b/app/init/resources.php index 6d2ce06709..24287ca243 100644 --- a/app/init/resources.php +++ b/app/init/resources.php @@ -433,9 +433,9 @@ App::setResource('user', function (string $mode, Document $project, Document $co // Account based on account API key $accountKey = $request->getHeader('x-appwrite-key', ''); - $accountKeyId = $request->getHeader('x-appwrite-user', ''); - if (!empty($accountKeyId) && !empty($accountKey)) { - $accountKeyUser = Authorization::skip(fn () => $dbForPlatform->getDocument('users', $accountKeyId)); + $accountKeyUserId = $request->getHeader('x-appwrite-user', ''); + if (!empty($accountKeyUserId) && !empty($accountKey)) { + $accountKeyUser = Authorization::skip(fn () => $dbForPlatform->getDocument('users', $accountKeyUserId)); if (!$accountKeyUser->isEmpty()) { $key = $accountKeyUser->find( key: 'secret',