X-Git-Url: https://code.wpia.club/?p=gigi.git;a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2Fapi%2FGigiAPI.java;fp=src%2Forg%2Fcacert%2Fgigi%2Fapi%2FGigiAPI.java;h=d511d315801180e2c871c50b259e3ff1c5359d7d;hp=a5acbe5605012fc08e3ef0b5cffc3b8228201b30;hb=df9913b57399c29d60f19dac38b0c0c401d6c657;hpb=038e2158a52d69c5cb4135f28f543e94d5e5ac47

diff --git a/src/org/cacert/gigi/api/GigiAPI.java b/src/org/cacert/gigi/api/GigiAPI.java
index a5acbe56..d511d315 100644
--- a/src/org/cacert/gigi/api/GigiAPI.java
+++ b/src/org/cacert/gigi/api/GigiAPI.java
@@ -50,6 +50,10 @@ public class GigiAPI extends HttpServlet {
         }
         String serial = LoginPage.extractSerialFormCert(cert);
         User u = LoginPage.fetchUserBySerial(serial);
+        if (u == null) {
+            resp.sendError(403, "Error, cert authing required.");
+            return;
+        }
 
         if (pi.equals("/account/certs/new")) {