Ensure you can only delete your own credentials
This commit is contained in:
parent
605586ea1b
commit
eabb096e14
1 changed files with 1 additions and 0 deletions
|
@ -37,6 +37,7 @@ export default async function handler(req, res) {
|
||||||
await prisma.credential.delete({
|
await prisma.credential.delete({
|
||||||
where: {
|
where: {
|
||||||
id: id,
|
id: id,
|
||||||
|
userId: session.user.id,
|
||||||
},
|
},
|
||||||
});
|
});
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue