Fix: db response may be empty

linagora · Mar 22, 2024 · ce3936e · ce3936e
1 parent 547dbfb
commit ce3936e
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/packages/matrix-identity-server/src/utils.ts b/packages/matrix-identity-server/src/utils.ts
@@ -60,7 +60,17 @@ export const Authenticate = (
     if (token != null) {
       db.get('accessTokens', ['data'], { id: token })
         .then((rows) => {
-          callback(JSON.parse(rows[0].data as string), token)
+          // eslint-disable-next-line @typescript-eslint/strict-boolean-expressions
+          if (!rows || rows.length === 0) {
+            logger.error(
+              `${req.socket.remoteAddress as string} sent an inexistent token ${
+                token as string
+              }`
+            )
+            send(res, 401, errMsg('unAuthorized'))
+          } else {
+            callback(JSON.parse(rows[0].data as string), token)
+          }
         })
         .catch((e) => {
           logger.error(