Check for DISABLE_LOGIN on api route.

This commit is contained in:
Mike Cao 2023-08-02 11:56:42 -07:00
parent 253a46460b
commit 7b9c29e039

View File

@ -7,6 +7,7 @@ import {
checkPassword,
createSecureToken,
methodNotAllowed,
forbidden,
} from 'next-basics';
import redis from '@umami/redis-client';
import { getUserByUsername } from 'queries';
@ -30,6 +31,10 @@ export default async (
req: NextApiRequestQueryBody<any, LoginRequestBody>,
res: NextApiResponse<LoginResponse>,
) => {
if (process.env.DISABLE_LOGIN) {
return forbidden(res);
}
if (req.method === 'POST') {
const { username, password } = req.body;