From 4dd3fd9674ed23cacf6a3ac7a256ade6a9c5b945 Mon Sep 17 00:00:00 2001
From: zadam <zadam.apps@gmail.com>
Date: Thu, 24 Feb 2022 23:22:20 +0100
Subject: [PATCH] better error when password is not set, #2685

---
 src/services/auth.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/services/auth.js b/src/services/auth.js
index 26e5aecea..3b36fa51c 100644
--- a/src/services/auth.js
+++ b/src/services/auth.js
@@ -94,6 +94,12 @@ function reject(req, res, message) {
 function checkCredentials(req, res, next) {
     if (!sqlInit.isDbInitialized()) {
         res.status(400).send('Database is not initialized yet.');
+        return;
+    }
+
+    if (!passwordService.isPasswordSet()) {
+        res.status(400).send('Password has not been set yet. Please set a password and repeat the action');
+        return;
     }
 
     const header = req.headers['trilium-cred'] || '';