Authorized default to inbox

2019-10-23 23:27:52 +01:00 · 2019-10-23 23:27:52 +01:00 · 204c9905c4
parent fdb26967b3
commit 204c9905c4
1 changed files with 4 additions and 1 deletions
--- a/daemon.py
+++ b/daemon.py
@ -613,6 +613,9 @@ class PubServer(BaseHTTPRequestHandler):
                tokenStr=self.headers['Cookie'].split('=',1)[1]
                if self.server.tokensLookup.get(tokenStr):
                    nickname=self.server.tokensLookup[tokenStr]
+                    # default to the inbox of the person
+                    if self.path=='/':
+                        self.path='/users/'+nickname+'/inbox'
                    # check that the path contains the same nickname as the cookie
                    # otherwise it would be possible to be authorized to use
                    # an account you don't own