From 0c3d482e82a5f97be217db5b4d7f38a72bafc25a Mon Sep 17 00:00:00 2001
From: Elijah R <elijah@elijahr.dev>
Date: Sun, 7 Apr 2024 15:15:20 -0400
Subject: [PATCH] reject logins before user connects to node

---
 src/WSServer.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/WSServer.ts b/src/WSServer.ts
index 761ddec..cf3d3b3 100644
--- a/src/WSServer.ts
+++ b/src/WSServer.ts
@@ -249,6 +249,10 @@ export default class WSServer {
         switch (msgArr[0]) {
             case "login":
                 if (msgArr.length !== 2 || !this.Config.auth.enabled) return;
+                if (!client.connectedToNode) {
+                    client.sendMsg(guacutils.encode("login", "0", "You must connect to the VM before logging in."));
+                    return;
+                }
                 var res = await this.auth!.Authenticate(msgArr[1], client);
                 if (res.clientSuccess) {
                     log("INFO", `${client.IP.address} logged in as ${res.username}`);