Check session token

10 years ago · 3934f6a663
parent 8ae21d491a
commit 3934f6a663
2 changed files with 4 additions and 1 deletions
--- a/ajax/sessionController.php
+++ b/ajax/sessionController.php
@ -23,6 +23,9 @@ class SessionController extends Controller{
 		try {
 			$token = Helper::getArrayValueByKey($args, 'token');
 			$file = File::getByShareToken($token);
+			if ($file->isPasswordProtected() && !$file->checkPassword('')){
+				throw new \Exception('Not authorized');
+			}
 			$session = Db\Session::start($uid, $file);
 			\OCP\JSON::success($session);
 		} catch (\Exception $e){