diff --git a/pages/api/v1/avatar/[id].ts b/pages/api/v1/avatar/[id].ts index c25ddff..a3e7be5 100644 --- a/pages/api/v1/avatar/[id].ts +++ b/pages/api/v1/avatar/[id].ts @@ -53,7 +53,11 @@ export default async function Index(req: NextApiRequest, res: NextApiResponse) { .send("File inaccessible."); } - if (user.username && !whitelistedUsernames?.includes(user.username)) { + if ( + user.username && + !whitelistedUsernames?.includes(user.username) && + targetUser.id !== user.id + ) { return res .setHeader("Content-Type", "text/plain") .status(400) @@ -61,6 +65,8 @@ export default async function Index(req: NextApiRequest, res: NextApiResponse) { } } + console.log(queryId); + const { file, contentType, status } = await readFile( `uploads/avatar/${queryId}.jpg` );