Check authorized nickname

2021-02-25 18:38:18 +00:00 · 2021-02-25 18:38:18 +00:00 · 7e9937cbd0
parent bcc59bac97
commit 7e9937cbd0
1 changed files with 8 additions and 6 deletions
--- a/daemon.py
+++ b/daemon.py
@ -10381,12 +10381,14 @@ class PubServer(BaseHTTPRequestHandler):
                nickname = nickname.split('/')[0]
            if '?' in nickname:
                nickname = nickname.split('?')[0]
-            if not isWelcomeScreenComplete(self.server.baseDir,
-                                           nickname,
-                                           self.server.domain):
-                self._redirect_headers('/users/' + nickname + '/welcome',
-                                       cookie, callingDomain)
-                return
+            if nickname == self.authorizedNickname and \
+               self.path != '/users/' + nickname:
+               if not isWelcomeScreenComplete(self.server.baseDir,
+                                              nickname,
+                                              self.server.domain):
+                   self._redirect_headers('/users/' + nickname + '/welcome',
+                                          cookie, callingDomain)
+                   return

        if not htmlGET and \
           usersInPath and self.path.endswith('/pinned'):