Make sure to check that they are friends.

2021-02-19 15:49:55 +00:00
parent 4eb76fd154
commit d2864ac025
1 changed files with 2 additions and 2 deletions
--- a/src/routes/users/find_mutual.rs
+++ b/src/routes/users/find_mutual.rs
@@ -12,8 +12,8 @@ pub async fn req(user: User, target: Ref) -> Result<JsonValue> {
        .find(
            doc! {
                "$and": [
-                    { "relations._id": &user.id },
-                    { "relations._id": &target.id }
+                    { "relations._id": &user.id, "relations.status": "Friend" },
+                    { "relations._id": &target.id, "relations.status": "Friend" }
                ]
            },
            FindOptions::builder().projection(doc! { "_id": 1 }).build(),