fix(nocodb): add missing GlobalGuard on signout

1 year ago · 3408f64243
1 changed files with 6 additions and 2 deletions
--- a/packages/nocodb/src/controllers/users/users.controller.ts
+++ b/packages/nocodb/src/controllers/users/users.controller.ts
@ -73,11 +73,15 @@ export class UsersController {
    res.json(this.usersService.login(req.user));
  }

+  @UseGuards(GlobalGuard)
  @Post('/api/v1/auth/user/signout')
  @HttpCode(200)
-  async signout(@Request() req, @Response() res): Promise<any> {
+  async signOut(@Request() req, @Response() res): Promise<any> {
+    if (!(req as any).isAuthenticated()) {
+      NcError.forbidden('Not allowed');
+    }
    res.json(
-      await this.usersService.signout({
+      await this.usersService.signOut({
        req,
        res,
      }),