This commit is contained in:
Max Hunt 2020-05-14 20:47:26 +01:00
parent 4aa740f855
commit b9efcc5c35

View File

@ -130,10 +130,10 @@ app.get('/my-product', function(request, responce){
if (request.query.uToken && request.query.productid) { if (request.query.uToken && request.query.productid) {
admin.auth().verifyIdToken(request.query.uToken) admin.auth().verifyIdToken(request.query.uToken)
.then(async function(decodedToken) { .then(async function(decodedToken) {
let uid = decodedToken.uid; let uid = decodedToken.uid
let pid = request.query.productid let pid = request.query.productid
if (await verifyExists(pid)){ if (await verifyExists(pid)){
if (await verifyOwner(uid, pid) || uid == "If84zSzRvlcCqRs0ZPJRpAcY1He2") { if (await verifyOwner(uid, pid)) {
var dbRef = database.ref("/products/"+pid) var dbRef = database.ref("/products/"+pid)
dbRef.once('value', function(snapshot){ dbRef.once('value', function(snapshot){
data = snapshot.val() data = snapshot.val()
@ -529,7 +529,7 @@ async function verifyOwner(uid, pid) {
let productRef = database.ref("/products/"+pid) let productRef = database.ref("/products/"+pid)
let snapshot = await productRef.once('value') let snapshot = await productRef.once('value')
let item = snapshot.val() let item = snapshot.val()
if (item.owner == uid){ if (item.owner == uid || uid == "If84zSzRvlcCqRs0ZPJRpAcY1He2"){
return true return true
} }
else { else {