fix potential security issue, player can't re-enable fediauth without interact privilege

2023-10-03 14:55:21 +03:00 · 2023-10-03 14:55:21 +03:00 · 2f803a8105
parent fda5d950f0
commit 2f803a8105
1 changed files with 1 additions and 0 deletions
--- a/onboard.lua
+++ b/onboard.lua
@ -21,6 +21,7 @@ minetest.register_chatcommand("fediauth_off", {

 minetest.register_chatcommand("fediauth_on", {
    description = "Enable the fediauth verification",
+    privs = { interact = true },
    func = function(name)
        local secret_b32 = fediauth.get_player_secret_b32(name)