Major refactoring: Add user id to API routes
This commit is contained in:
@@ -4,8 +4,9 @@ const fs = require("fs");
|
||||
const decrypt = require("./decrypt");
|
||||
|
||||
/** @type {import("../../types").CheckApiCredentialsFn} */
|
||||
const grabApiCred = ({ key, database, table }) => {
|
||||
const grabApiCred = ({ key, database, table, user_id }) => {
|
||||
if (!key) return null;
|
||||
if (!user_id) return null;
|
||||
|
||||
try {
|
||||
const allowedKeysPath = process.env.DSQL_API_KEYS_PATH;
|
||||
@@ -22,6 +23,8 @@ const grabApiCred = ({ key, database, table }) => {
|
||||
`${allowedKeysPath}/${ApiObject.sign}`
|
||||
);
|
||||
|
||||
if (String(ApiObject.user_id) !== String(user_id)) return null;
|
||||
|
||||
if (!isApiKeyValid) return null;
|
||||
if (!ApiObject.target_database) return ApiObject;
|
||||
if (!database && ApiObject.target_database) return null;
|
||||
|
||||
Reference in New Issue
Block a user