fix: user enumaration on forgot password page
This commit is contained in:
@@ -34,7 +34,7 @@ export async function middleware(request: NextRequest) {
|
||||
|
||||
try {
|
||||
const claims = jwtDecode<{ exp: number; isAdmin: boolean }>(
|
||||
accessToken as string
|
||||
accessToken as string,
|
||||
);
|
||||
if (claims.exp * 1000 > Date.now()) {
|
||||
user = claims;
|
||||
|
||||
Reference in New Issue
Block a user