fixup! feat(security): application token refresh

add missing userid check

Author: eternal-flame-AD

api/application.go

@@ -335,20 +335,22 @@ func (a *ApplicationAPI) UpdateApplicationSecurity(ctx *gin.Context) {
 		if success := successOrAbort(ctx, 500, err); !success {
 			return
 		}
-		action := model.SecurityUpdateAction{}
-		response := model.SecurityUpdateActionResponse{}
-		if err := ctx.Bind(&action); err == nil {
-			if action.RegenerateToken {
-				tokenPublic, tokenPrivate := generateApplicationToken()
-				app.Token = tokenPublic
-				response.RegenerateToken = &model.RegenerateTokenResponse{
-					Token: tokenPrivate,
+		if app != nil && app.UserID == auth.GetUserID(ctx) {
+			action := model.SecurityUpdateAction{}
+			response := model.SecurityUpdateActionResponse{}
+			if err := ctx.Bind(&action); err == nil {
+				if action.RegenerateToken {
+					tokenPublic, tokenPrivate := generateApplicationToken()
+					app.Token = tokenPublic
+					response.RegenerateToken = &model.RegenerateTokenResponse{
+						Token: tokenPrivate,
+					}
 				}
+				if success := successOrAbort(ctx, 500, a.DB.UpdateApplication(app)); !success {
+					return
+				}
+				ctx.JSON(200, response)
 			}
-			if success := successOrAbort(ctx, 500, a.DB.UpdateApplication(app)); !success {
-				return
-			}
-			ctx.JSON(200, response)
 		}
 	})
 }