fixes #274 empty token issue (#278)

BC-SECURITY · Aug 11, 2020 · d68a952 · d68a952
1 parent 85f3726
commit d68a952
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/empire b/empire
@@ -236,9 +236,12 @@ def start_restful_api(empireMenu, suppress=False, username=None, password=None,
         try:
             if request.path != '/api/admin/login':
                 token = request.args.get('token')
-                user = u.get_user_from_token(token)
-                if user:
-                    g.user = user
+                if token and len(token) > 0:
+                    user = u.get_user_from_token(token)
+                    if user:
+                        g.user = user
+                    else:
+                        return make_response('', 401)
                 else:
                     return make_response('', 401)
         except: