From 4b132fc8090f047b2fdd3b48fd03f38af528fb6d Mon Sep 17 00:00:00 2001 From: Daniel Holmgren Date: Wed, 20 Sep 2023 19:57:01 -0500 Subject: [PATCH] Disable getAccountInviteCodes for app passwords (#1642) disable getAccountInviteCodes for app passwords --- .../pds/src/api/com/atproto/server/getAccountInviteCodes.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/pds/src/api/com/atproto/server/getAccountInviteCodes.ts b/packages/pds/src/api/com/atproto/server/getAccountInviteCodes.ts index c7269d095a7..671528fcdd4 100644 --- a/packages/pds/src/api/com/atproto/server/getAccountInviteCodes.ts +++ b/packages/pds/src/api/com/atproto/server/getAccountInviteCodes.ts @@ -6,7 +6,7 @@ import { CodeDetail } from '../../../../services/account' export default function (server: Server, ctx: AppContext) { server.com.atproto.server.getAccountInviteCodes({ - auth: ctx.accessVerifierCheckTakedown, + auth: ctx.accessVerifierNotAppPassword, handler: async ({ params, auth }) => { const requester = auth.credentials.did const { includeUsed, createAvailable } = params