jason/cpolis
1
0
Fork 1
Code Issues Pull Requests Packages Projects Releases 58 Wiki Activity

Verify token before querying index

Browse Source
This commit is contained in:
Jason Streifling 2025-03-01 09:02:31 +01:00
parent d6c58cf532
commit 30c35f2112
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cmd/calls/articles.go
View File

@ -111,8 +111,12 @@ func ServeClicks(db *b.DB) http.HandlerFunc {
} }
} }
func QueryArticles(i *b.Index) http.HandlerFunc { func QueryArticles(c *b.Config, i *b.Index) http.HandlerFunc {
return func(w http.ResponseWriter, r *http.Request) { return func(w http.ResponseWriter, r *http.Request) {
if !tokenIsVerified(w, r, c) {
return
}
result, err := i.Query(r.PathValue("query")) result, err := i.Query(r.PathValue("query"))
if err != nil { if err != nil {
log.Println(err) log.Println(err)

2
cmd/main.go
View File

@ -60,7 +60,7 @@ func main() {
mux.HandleFunc("GET /article/delete/{id}", f.DeleteArticle(config, db, sessions)) mux.HandleFunc("GET /article/delete/{id}", f.DeleteArticle(config, db, sessions))
mux.HandleFunc("GET /article/edit/{id}", f.EditArticle(config, db, sessions)) mux.HandleFunc("GET /article/edit/{id}", f.EditArticle(config, db, sessions))
mux.HandleFunc("GET /article/publish/{id}", f.PublishArticle(config, db, sessions, index)) mux.HandleFunc("GET /article/publish/{id}", f.PublishArticle(config, db, sessions, index))
mux.HandleFunc("GET /article/query/{query}", c.QueryArticles(index)) mux.HandleFunc("GET /article/query/{query}", c.QueryArticles(config, index))
mux.HandleFunc("GET /article/reject/{id}", f.RejectArticle(config, db, sessions)) mux.HandleFunc("GET /article/reject/{id}", f.RejectArticle(config, db, sessions))
mux.HandleFunc("GET /article/review-delete/{id}", f.ReviewArticle(config, db, sessions, "delete", "Artikel löschen", "Löschen")) mux.HandleFunc("GET /article/review-delete/{id}", f.ReviewArticle(config, db, sessions, "delete", "Artikel löschen", "Löschen"))
mux.HandleFunc("GET /article/review-edit/{id}", f.ReviewArticle(config, db, sessions, "allow-edit", "Artikel bearbeiten", "Bearbeiten erlauben")) mux.HandleFunc("GET /article/review-edit/{id}", f.ReviewArticle(config, db, sessions, "allow-edit", "Artikel bearbeiten", "Bearbeiten erlauben"))