hculpan/areweplaying
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add missing auth check to saveSetupHandler

Browse source 
Consistent with all other mutation handlers which already guard with
ValidateJWTFromCookie.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Harry Culpan 2026-06-30 18:23:27 -04:00
parent 07e67d4684
commit 2d6436dca6
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
cmd/web/savesetuphandler.go
View file

@ -13,6 +13,11 @@ import (
) )
func saveSetupHandler(w http.ResponseWriter, r *http.Request) { func saveSetupHandler(w http.ResponseWriter, r *http.Request) {
if !ValidateJWTFromCookie(r, appKey) {
http.Error(w, "Unauthorized", http.StatusUnauthorized)
return
}
r.ParseForm() r.ParseForm()
nextSession := r.FormValue("nextSession") nextSession := r.FormValue("nextSession")
incDays := r.FormValue("incDays") incDays := r.FormValue("incDays")