fix it here too

MineSkin · Jan 27, 2025 · ac0710e · ac0710e
1 parent 0356537
commit ac0710e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/middleware/apikey.ts b/src/middleware/apikey.ts
@@ -59,7 +59,7 @@ export const verifyApiKey = async (req: MineSkinV2Request, res: Response) => {
             // Either a server IP or a client origin, not both
             if (key.allowedIps && key.allowedIps.length > 0) {
                 const ip = getIp(req);
-                if (!ip || key.allowedIps.includes(ip.trim())) {
+                if (!ip || !key.allowedIps.includes(ip.trim())) {
                     console.log(debug(`Client ${ ip } not allowed`));
                     throw new MineSkinError("invalid_api_key", "Client not allowed", {httpCode: 403});
                 }