detleph/server
1
0
Fork 0
mirror of https://github.com/detleph/server.git synced 2026-09-07 07:56:18 +02:00
Code Issues 9 Packages Projects Releases Wiki Activity

Add authorization

Browse Source
This commit is contained in:
Stephan
2022-04-28 12:49:05 +02:00
parent 6d471eced2
commit 4a65dd4665
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Controllers/event.controller.ts
+6 -2
View File
@@ -79,20 +79,24 @@ export const getEvent = async (req: Request, res: Response) => {
} }
}; };
// requires: auth(ELEVATED)
export const addEvent = async (req: Request, res: Response) => { export const addEvent = async (req: Request, res: Response) => {
if (req.auth?.permission_level !== "ELEVATED") {
res.status(403).json(createInsufficientPermissionsError());
}
if ( if (
typeof req.body.name !== "string" || typeof req.body.name !== "string" ||
typeof req.body.date !== "string" || typeof req.body.date !== "string" ||
typeof req.body.description !== "string" typeof req.body.description !== "string"
) { ) {
res.status(400).json( return res.status(400).json(
generateInvalidBodyError({ generateInvalidBodyError({
name: DataType.STRING, name: DataType.STRING,
date: DataType.DATETIME, date: DataType.DATETIME,
description: DataType.STRING, description: DataType.STRING,
}) })
); );
return;
} }
//TODO: Check if date is valid //TODO: Check if date is valid