Add auth check to game appeal metadata endpoint

regalijan · Oct 19, 2023 · f51742e · f51742e
1 parent f135368
commit f51742e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/functions/api/game-appeals/metadata.ts b/functions/api/game-appeals/metadata.ts
@@ -2,6 +2,12 @@ import { jsonError, jsonResponse } from "../../common.js";
 import precheck from "./precheck.js";
 
 export async function onRequestPost(context: RequestContext) {
+  if (
+    context.request.headers.get("authorization") !==
+    `Bearer ${context.env.ROBLOX_APPEALS_TOKEN}`
+  )
+    return jsonError("Unauthorized", 401);
+
   const { id }: { id: any } = context.data.body;
 
   if (typeof id !== "number") return jsonError("Invalid user id", 400);