| 36 | } else if (PER_USER_BASIC_AUTH) { | 36 | } else if (PER_USER_BASIC_AUTH) { |
| 37 | const userHandles = await getAllUserHandles(); | 37 | const userHandles = await getAllUserHandles(); |
| 38 | for (const userHandle of userHandles) { | 38 | for (const userHandle of userHandles) { |
| 39 | if (username == userHandle) { | 39 | if (username === userHandle) { |
| 40 | const user = await storage.getItem(toKey(userHandle)); | 40 | const user = await storage.getItem(toKey(userHandle)); |
| 41 | if (user && (user.password && user.password === getPasswordHash(password, user.salt))) { | 41 | if (user && user.enabled && (user.password && user.password === getPasswordHash(password, user.salt))) { |
| 42 | return callback(); | 42 | return callback(); |
| 43 | } | 43 | } |
| 44 | else if (user && !user.password && !password) { | 44 | else if (user && user.enabled && !user.password && !password) { |
| 45 | // Login to an account without password | 45 | // Login to an account without password |
| 46 | return callback(); | 46 | return callback(); |
| 47 | } | 47 | } |