check token on api post request

2023-02-16 23:01:04 +08:00
parent 4ebe5026ed
commit ce2adb9b81
3 changed files with 20 additions and 6 deletions
--- a/pages/api/html.ts
+++ b/pages/api/html.ts
@@ -1,8 +1,13 @@
 import type { NextApiRequest, NextApiResponse } from "next";
 import { html } from "@/store";
+import config from "@/config";

 export default function handler(req: NextApiRequest, res: NextApiResponse) {
  if (req.method === "POST") {
+    if (req.headers.token !== config.token) {
+      res.status(403).json({ error: "wrong token" });
+      return;
+    }
    html.set(req.body.html);
  }
  res.status(200).json({