From d2864ac0251cfb77e5b7f24436884935ffa368ae Mon Sep 17 00:00:00 2001
From: Paul <paulmakles@gmail.com>
Date: Fri, 19 Feb 2021 15:49:55 +0000
Subject: [PATCH] Make sure to check that they are friends.

---
 src/routes/users/find_mutual.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/routes/users/find_mutual.rs b/src/routes/users/find_mutual.rs
index 2a31d4b..0f58b87 100644
--- a/src/routes/users/find_mutual.rs
+++ b/src/routes/users/find_mutual.rs
@@ -12,8 +12,8 @@ pub async fn req(user: User, target: Ref) -> Result<JsonValue> {
         .find(
             doc! {
                 "$and": [
-                    { "relations._id": &user.id },
-                    { "relations._id": &target.id }
+                    { "relations._id": &user.id, "relations.status": "Friend" },
+                    { "relations._id": &target.id, "relations.status": "Friend" }
                 ]
             },
             FindOptions::builder().projection(doc! { "_id": 1 }).build(),
-- 
GitLab