vingo: don't redirect on unauthorized api requests

ZeusWPI · Jun 16, 2024 · b6b9aac · b6b9aac
1 parent cacc339
commit b6b9aac
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/vingo/handlers/access.go b/vingo/handlers/access.go
@@ -10,6 +10,14 @@ func IsLoggedIn(c *fiber.Ctx) error {
 	return c.Next()
 }
 
+func IsLoggedInAPI(c *fiber.Ctx) error {
+	if getUserFromStore(c) == nil {
+		return c.Status(401).SendString("Unauthorized")
+	}
+
+	return c.Next()
+}
+
 func IsAdmin(c *fiber.Ctx) error {
 	if !isAdmin(c) {
 		return c.Status(403).SendString("Forbidden")

diff --git a/vingo/main.go b/vingo/main.go
@@ -52,7 +52,7 @@ func main() {
 		logged.Post("/settings", handlers.SettingsUpdate)
 	}
 
-	api := logged.Group("/api", handlers.IsLoggedIn)
+	api := logged.Group("/api", handlers.IsLoggedInAPI)
 	{
 		api.Get("/user", handlers.User)
 		api.Get("/leaderboard", handlers.Leaderboard)