[PR #75] [MERGED] fix: add missing await when verifying pincode #33582

Closed
opened 2026-06-17 03:12:11 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/fosrl/pangolin/pull/75
Author: @mallendeo
Created: 1/18/2025
Status: Merged
Merged: 1/18/2025
Merged by: @miloschwartz

Base: mainHead: patch-1


📝 Commits (1)

  • 6b141c3 fix: add missing await when verifying pincode

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 server/routers/resource/authWithPincode.ts (+1 -1)

📄 Description

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

When using a PIN, Pangolin grants access regardless of whether the PIN is correct or not.
This PR fixes that by waiting for the promise (validPincode ends up as a Promise and evaluates as a thruthy value wether the pin is correct or not).

Closes #74

How to test?

Create a PIN code for a resource, then try any password when accessing it.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/pangolin/pull/75 **Author:** [@mallendeo](https://github.com/mallendeo) **Created:** 1/18/2025 **Status:** ✅ Merged **Merged:** 1/18/2025 **Merged by:** [@miloschwartz](https://github.com/miloschwartz) **Base:** `main` ← **Head:** `patch-1` --- ### 📝 Commits (1) - [`6b141c3`](https://github.com/fosrl/pangolin/commit/6b141c3ea01e259d488227d99194a8e8cf2ebbe0) fix: add missing `await` when verifying pincode ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `server/routers/resource/authWithPincode.ts` (+1 -1) </details> ### 📄 Description ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description When using a PIN, Pangolin grants access regardless of whether the PIN is correct or not. This PR fixes that by waiting for the promise (`validPincode` ends up as a `Promise` and evaluates as a thruthy value wether the pin is correct or not). Closes #74 ## How to test? Create a PIN code for a resource, then try any password when accessing it. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-06-17 03:12:11 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#33582