| 674 | if (login == userHandle) { | 674 | if (login == userHandle) { |
| 675 | const user = await storage.getItem(toKey(userHandle)); | 675 | const user = await storage.getItem(toKey(userHandle)); |
| 676 | // Verify pass again here just to be sure | 676 | // Verify pass again here just to be sure |
| 677 | if (user && user.password && user.password === getPasswordHash(password, user.salt)) { | 677 | if (user && user.enabled && user.password && user.password === getPasswordHash(password, user.salt)) { |
| 678 | request.session.handle = userHandle; | 678 | request.session.handle = userHandle; |
| 679 | return true; | 679 | return true; |
| 680 | } | 680 | } |
| 681 | else if (user && !user.password && !password) { | 681 | else if (user && user.enabled && !user.password && !password) { |
| 682 | // Login to an account without password | 682 | // Login to an account without password |
| 683 | request.session.handle = userHandle; | 683 | request.session.handle = userHandle; |
| 684 | return true; | 684 | return true; |