Require targetUserId for item transfers

This commit is contained in:
Jage9
2026-02-28 20:26:40 -05:00
parent daab7bb759
commit 449f2c9530
5 changed files with 16 additions and 12 deletions

View File

@@ -140,8 +140,7 @@ class ItemDeletePacket(BasePacket):
class ItemTransferPacket(BasePacket):
type: Literal["item_transfer"]
itemId: str
targetId: str | None = None
targetUserId: str | None = None
targetUserId: str
class ItemTransferTargetsPacket(BasePacket):

View File

@@ -2545,11 +2545,7 @@ class SignalingServer:
if not can_transfer_any and not can_transfer_own:
await self._send_item_result(client, False, "transfer", "Not authorized to transfer this item.", item.id)
return
target_user_id = str(packet.targetUserId or "").strip()
if not target_user_id and packet.targetId:
target = self._get_client_by_id(packet.targetId)
if target and target.authenticated and target.user_id:
target_user_id = target.user_id
target_user_id = str(packet.targetUserId).strip()
if not target_user_id:
await self._send_item_result(client, False, "transfer", "Target user is not available.", item.id)
return