check token on api post request

2023-02-16 23:01:04 +08:00
parent 4ebe5026ed
commit ce2adb9b81
3 changed files with 20 additions and 6 deletions
--- a/pages/api/config.ts
+++ b/pages/api/config.ts
@@ -3,6 +3,10 @@ import config from "@/config";

 export default function handler(req: NextApiRequest, res: NextApiResponse) {
  if (req.method === "POST") {
+    if (req.headers.token !== config.token) {
+      res.status(403).json({ error: "wrong token" });
+      return;
+    }
    // update config
    config.begin = req.body.begin ?? config.begin;
    config.limit = req.body.limit ?? config.limit;