check for correct username

2019-09-22 20:10:33 +10:00 · 2019-09-22 20:10:33 +10:00 · 168c5a0bb2
parent c7241ca9ea
commit 168c5a0bb2
1 changed files with 4 additions and 1 deletions
--- a/app/pages/bot/accounts_add.py
+++ b/app/pages/bot/accounts_add.py
@ -74,7 +74,10 @@ def bot_accounts_add(mysql, cfg):
 					code = request.form['code'],
 					scopes=["read:statuses"] if session['instance_type'] == 'Mastodon' else ["read"],
 				)
-				client.account_verify_credentials()
+				username = client.account_verify_credentials()['username']
+				if username != session['username']:
+					error = "Incorrect username."
+					return render_template("bot/accounts_add.html", error = error)
 			except:
 				session['step'] = 1
 				error = "Authentication failed."