[API] Fix bug

Closes #215
This commit is contained in:
syuilo 2017-03-01 14:43:41 +09:00
parent 76aaa340a3
commit e407cca90b
1 changed files with 10 additions and 0 deletions

View File

@ -31,6 +31,16 @@ module.exports = (params, user) =>
// Get 'user_id' parameter // Get 'user_id' parameter
let recipient = params.user_id; let recipient = params.user_id;
if (recipient !== undefined && recipient !== null) { if (recipient !== undefined && recipient !== null) {
// Validate id
if (!mongo.ObjectID.isValid(recipient)) {
return rej('incorrect user_id');
}
// Myself
if (new mongo.ObjectID(recipient).equals(user._id)) {
return rej('-need-translate-');
}
recipient = await User.findOne({ recipient = await User.findOne({
_id: new mongo.ObjectID(recipient) _id: new mongo.ObjectID(recipient)
}, { }, {