Fix account verification before login password

quarkey-net · Oct 15, 2021 · ba327d3 · ba327d3
1 parent 135ba04
commit ba327d3
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/routes/login.py b/routes/login.py
@@ -52,12 +52,13 @@ def on_post(self, req, resp):
                 resp.media  = {'title': 'BAD_REQUEST', 'description': 'Your account has been banned'}
                 return
 
-            if verification_date is None or verification_date > datetime.datetime.utcnow():
-                resp.status = falcon.HTTP_ALREADY_REPORTED
-                resp.media  = {'title': 'BAD_REQUEST', 'description': 'Please verify your account'}
-                return
-
             if self.password_hasher.verify_password(password, req.media['password']):
+
+                if verification_date is None or verification_date > datetime.datetime.utcnow():
+                    resp.status = falcon.HTTP_ALREADY_REPORTED
+                    resp.media  = {'title': 'BAD_REQUEST', 'description': 'Please verify your account'}
+                    return
+
                 if subscription_exp > datetime.datetime.utcnow():
                     roles.append('premium')