Fixed a bunch of security issues with people not inside a server being

able to read it and also fixed some other bugs and implemented
propagation for members joining/leavings servers

1 files changed, 4 insertions, 4 deletions

diff --git a/internal/data/members.sql.go b/internal/data/members.sql.go
index 8d90512..29c0f58 100644
--- a/internal/data/members.sql.go
+++ b/internal/data/members.sql.go
@@ -134,14 +134,14 @@ func (q *Queries) GetNetworkMembers(ctx context.Context, networkID snowflake.ID)
 	return items, nil
 }
 
-const getNetworksOfUser = `-- name: GetNetworksOfUser :many
+const getUserNetworks = `-- name: GetUserNetworks :many
 SELECT networks.id, networks.owner_id, networks.name, networks.icon, networks.bg_hex_color, networks.fg_hex_color, networks.is_public FROM networks
 JOIN members ON networks.id = members.network_id
-WHERE members.user_id = ?
+WHERE members.user_id = ? AND members.is_member = true
 `
 
-func (q *Queries) GetNetworksOfUser(ctx context.Context, userID snowflake.ID) ([]Network, error) {
-	rows, err := q.db.QueryContext(ctx, getNetworksOfUser, userID)
+func (q *Queries) GetUserNetworks(ctx context.Context, userID snowflake.ID) ([]Network, error) {
+	rows, err := q.db.QueryContext(ctx, getUserNetworks, userID)
 	if err != nil {
 		return nil, err
 	}