Ensure you can only delete your own credentials

2021-10-26 16:21:08 +01:00
parent 605586ea1b
commit eabb096e14
1 changed files with 1 additions and 0 deletions
@@ -37,6 +37,7 @@ export default async function handler(req, res) {
    await prisma.credential.delete({
      where: {
        id: id,
+        userId: session.user.id,
      },
    });