Merge pull request thelounge#570 from thelounge/astorije/569-fix-auth

Make sure users with wrong tokens are locked out instead of crashing the app
matburnham · Aug 21, 2016 · 782ed84 · 782ed84
2 parents a193186 + 7643533
commit 782ed84
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/server.js b/src/server.js
@@ -286,10 +286,10 @@ function auth(data) {
 		}
 	} else {
 		client = manager.findClient(data.user, data.token);
-		var signedIn = data.token && data.token === client.config.token;
+		var signedIn = data.token && client && data.token === client.config.token;
 		var token;
 
-		if (data.remember || data.token) {
+		if (client && (data.remember || data.token)) {
 			token = client.config.token;
 		}