Add authorization check for onetimesecrets

steunix · Sep 21, 2024 · 334e695 · 334e695
1 parent 1c4ee24
commit 334e695
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/api/v1/routes/onetimetokens.mjs b/api/v1/routes/onetimetokens.mjs
@@ -5,11 +5,15 @@
  */
 
 import { Router } from 'express'
+import * as auth from '../../../lib/auth.mjs'
 
 import * as oneTimeTokensController from '../controllers/onetimetokens.mjs'
 
 const router = Router({mergeParams:true})
 
+// Validation middleware
+router.use(/\/$/, auth.validateJWT)
+
 router.post('/', oneTimeTokensController.create)
 
 router.get('/:id', oneTimeTokensController.get)