fix allowed IP check

MineSkin · Jan 27, 2025 · 0356537 · 0356537
1 parent 203e820
commit 0356537
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/util/index.ts b/src/util/index.ts
@@ -194,7 +194,7 @@ export async function getAndValidateRequestApiKey(req: MineSkinRequest): Promise
         // Either a server IP or a client origin, not both
         if (key.allowedIps && key.allowedIps.length > 0) {
             const ip = getIp(req);
-            if (!ip || key.allowedIps.includes(ip.trim())) {
+            if (!ip || !key.allowedIps.includes(ip.trim())) {
                 console.log(debug(`Client ${ ip } not allowed`));
                 throw new MineSkinError("invalid_api_key", "Client not allowed", {httpCode: 403});
             }