feat: deny login from banned user

GZTimeWalker · Jul 20, 2022 · 869abac · 869abac
1 parent 8b8247b
commit 869abac
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/GZCTF/Controllers/AccountController.cs b/GZCTF/Controllers/AccountController.cs
@@ -235,6 +235,9 @@ public async Task<IActionResult> LogIn([FromBody] LoginModel model)
         if (user is null)
             return Unauthorized(new RequestResponse("用户名或密码错误", 401));
 
+        if (user.Role == Role.Banned)
+            return Unauthorized(new RequestResponse("用户已被禁用", 401));
+
         user.LastSignedInUTC = DateTimeOffset.UtcNow;
         user.UpdateByHttpContext(HttpContext);