Merge remote-tracking branch 'origin/master'

2019-03-14 18:11:08 -04:00
parent 18ea5de8aa 41b888c9e0
commit e71e36eb5f
4 changed files with 15 additions and 3 deletions
--- a/src/api/oauth/auth.ts
+++ b/src/api/oauth/auth.ts
@ -46,7 +46,7 @@ const AuthRoute = Stacker(GetUserMiddleware(true), async (req: Request, res: Res

         let permissions: IPermission[] = [];
         if (scope) {
-            let perms = (<string>scope).split(";").map(p => new ObjectID(p));
+            let perms = (<string>scope).split(";").filter(e => e !== "read_user").map(p => new ObjectID(p));
            permissions = await Permission.find({ _id: { $in: perms } })

            if (permissions.length != perms.length) {