[bug] Fix login attempts to disabled users

0ada5407ee92d15083bcedc0ab494b4495cd4b44

Cohee <18619528+Cohee1207@users.noreply.github.com>

src/middleware/basicAuth.js+3 -3 Viewed

     } else if (PER_USER_BASIC_AUTH) {
         const userHandles = await getAllUserHandles();
         for (const userHandle of userHandles) {
             if (username === userHandle) {
                 const user = await storage.getItem(toKey(userHandle));
                 if (user && user.enabled && (user.password && user.password === getPasswordHash(password, user.salt))) {
                     return callback();
+                }
                 else if (user && user.enabled && !user.password && !password) {
                     // Login to an account without password
                     return callback();
+                }

src/users.js+1 -1 Viewed

     for (const userHandle of userHandles) {
         if (remoteUser == userHandle) {
             const user = await storage.getItem(toKey(userHandle));
             if (user && user.enabled) {
                 request.session.handle = userHandle;
                 return true;
+            }