Fix #1577

3 years ago · 023db1450d
parent 824c16a07c
commit 023db1450d
2 changed files with 523 additions and 348 deletions
--- a/package-lock.json
+++ b/package-lock.json
--- a/server/server.js
+++ b/server/server.js
@ -1047,7 +1047,13 @@ try {
            try {
                checkLogin(socket);

-                if (data.disableAuth) {
+                // If currently is disabled auth, don't need to check
+                // Disabled Auth + Want to Disable Auth => No Check
+                // Disabled Auth + Want to Enable Auth => No Check
+                // Enabled Auth + Want to Disable Auth => Check!!
+                // Enabled Auth + Want to Enable Auth => No Check
+                const currentDisabledAuth = await setting("disableAuth");
+                if (!currentDisabledAuth && data.disableAuth) {
                    await doubleCheckPassword(socket, currentPassword);
                }