fix account delete bug

thomashu1987 · Nov 1, 2022 · 3a617b7 · 3a617b7
1 parent e558192
commit 3a617b7
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/pages/api/accounts/[id]/index.js b/pages/api/accounts/[id]/index.js
@@ -43,7 +43,7 @@ export default async (req, res) => {
       const accountByUsername = await getAccount({ username });
 
       if (accountByUsername) {
-        return badRequest(res, 'Account already exists');
+        return badRequest(res, 'Account already exists.');
       }
     }
 
@@ -53,11 +53,15 @@ export default async (req, res) => {
   }
 
   if (req.method === 'DELETE') {
+    if (id === userId) {
+      return badRequest(res, 'You cannot delete your own account.');
+    }
+
     if (!isAdmin) {
       return unauthorized(res);
     }
 
-    await deleteAccount(userId);
+    await deleteAccount(+id);
 
     return ok(res);
   }