mirror of
https://github.com/glimpse-app/server.git
synced 2025-04-02 10:52:45 -04:00
auth using header fixes #9
This commit is contained in:
parent
a4b3d9fc81
commit
777e30d53a
2 changed files with 6 additions and 5 deletions
|
@ -26,5 +26,5 @@ curl -s -X POST http://localhost:5000/api/v1/register -d 'username=Array' -d 'pa
|
|||
```
|
||||
|
||||
```sh
|
||||
curl -s -X POST -F "file=@image.png" -F "token=<some long hash here>" http://localhost:5000/api/v1/upload
|
||||
curl -s -X POST -H "Authorization: <some long hash here>" -F "file=@image.png" http://localhost:5000/api/v1/upload
|
||||
```
|
||||
|
|
|
@ -13,6 +13,7 @@ let db = open("storage.db", "", "", "")
|
|||
db.createTables(newFile()) # file objects require a user object, thus a tables for both are created
|
||||
|
||||
routes:
|
||||
|
||||
get "/":
|
||||
resp "Hello, World!" # idk what to put here
|
||||
|
||||
|
@ -50,9 +51,9 @@ routes:
|
|||
# generates a new login token after signin
|
||||
var user = newUser()
|
||||
|
||||
if not @"token".isEmptyOrWhitespace():
|
||||
if not request.headers["Authorization"].isEmptyOrWhitespace():
|
||||
|
||||
if not db.validToken(user, @"token"):
|
||||
if not db.validToken(user, request.headers["Authorization"]):
|
||||
resp Http403, "Invalid token."
|
||||
|
||||
db.genNewToken(user)
|
||||
|
@ -82,7 +83,7 @@ routes:
|
|||
]#
|
||||
post "/api/v1/getItemByName":
|
||||
var user = newUser()
|
||||
if not db.validToken(user, @"token"):
|
||||
if not db.validToken(user, request.headers["Authorization"]):
|
||||
resp Http403, "Invalid token."
|
||||
|
||||
var file = newFile()
|
||||
|
@ -126,7 +127,7 @@ routes:
|
|||
|
||||
# fills the new `user` var with saved user data from database
|
||||
var user = newUser()
|
||||
if not db.validToken(user, request.formData["token"].body):
|
||||
if not db.validToken(user, request.headers["Authorization"]):
|
||||
resp Http403, "Invalid token."
|
||||
|
||||
# pull request form data arguments
|
||||
|
|
Loading…
Add table
Reference in a new issue