From 18afc46e5e9c81f1f4c9dd5d12af468acfabae46 Mon Sep 17 00:00:00 2001
From: Halgari <tbaldridge@gmail.com>
Date: Thu, 23 Feb 2023 22:40:09 -0700
Subject: [PATCH] Auth against the correct code this time

---
 Wabbajack.Server/ApiKeyAuthorizationHandler.cs | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/Wabbajack.Server/ApiKeyAuthorizationHandler.cs b/Wabbajack.Server/ApiKeyAuthorizationHandler.cs
index 8a979e4a..11c52a50 100644
--- a/Wabbajack.Server/ApiKeyAuthorizationHandler.cs
+++ b/Wabbajack.Server/ApiKeyAuthorizationHandler.cs
@@ -86,9 +86,7 @@ public class ApiKeyAuthenticationHandler : AuthenticationHandler<ApiKeyAuthentic
         
         if (authorKey != null)
         {
-            if (await _tarLog.Contains(authorKey))
-                return AuthenticateResult.Fail("Banned author key");
-            
+
             var owner = await _authorKeys.AuthorForKey(authorKey);
             if (owner == null)
             {
@@ -100,6 +98,9 @@ public class ApiKeyAuthenticationHandler : AuthenticationHandler<ApiKeyAuthentic
                 owner = "github/" + ghUser.Login;
             }
 
+            if (await _tarLog.Contains(owner))
+                return AuthenticateResult.Fail("Banned author key");
+            
             var claims = new List<Claim> {new(ClaimTypes.Name, owner)};
 
             claims.Add(new Claim(ClaimTypes.Role, "Author"));