Handle ip auth for report recall endpoint

regalijan · Oct 19, 2023 · 45e05d7 · 45e05d7
1 parent cd420ea
commit 45e05d7
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/functions/api/reports/recall.ts b/functions/api/reports/recall.ts
@@ -11,7 +11,11 @@ export async function onRequestPost(context: RequestContext) {
 
   const reportUserId = await context.env.DATA.get(`reportprocessing_${id}`);
 
-  if (!reportUserId || context.data.current_user?.id !== reportUserId)
+  if (
+    !reportUserId ||
+    (context.data.current_user?.id !== reportUserId &&
+      context.request.headers.get("CF-Connecting-IP") !== reportUserId)
+  )
     return new Response('{"error":"No processing report with that ID found"}', {
       headers: {
         "content-type": "application/json",