mirror of
https://github.com/stack-auth/stack.git
synced 2026-06-13 21:01:21 +08:00
current-user should be null if project ID is wrong
This commit is contained in:
parent
3b9e96e460
commit
a5f9587f22
@ -73,7 +73,7 @@ const handler = deprecatedSmartRouteHandler(async (req: NextRequest) => {
|
||||
const { userId, projectId: accessTokenProjectId } = decodedAccessToken;
|
||||
|
||||
if (accessTokenProjectId !== projectId) {
|
||||
throw new StatusError(StatusError.Forbidden);
|
||||
return NextResponse.json(null);
|
||||
}
|
||||
|
||||
let user;
|
||||
|
||||
Loading…
Reference in New Issue
Block a user