Use token authentication for API requests.
This commit is contained in:
@@ -1,8 +1,8 @@
|
||||
import { getWebsiteByUuid, getSessionByUuid, createSession } from 'lib/queries';
|
||||
import { getClientInfo } from 'lib/request';
|
||||
import { uuid, isValidId } from 'lib/crypto';
|
||||
import { uuid, isValidUuid } from 'lib/crypto';
|
||||
|
||||
export async function verifySession(req) {
|
||||
export async function getSession(req) {
|
||||
const { payload } = req.body;
|
||||
|
||||
if (!payload) {
|
||||
@@ -11,7 +11,7 @@ export async function verifySession(req) {
|
||||
|
||||
const { website: website_uuid, hostname, screen, language } = payload;
|
||||
|
||||
if (!isValidId(website_uuid)) {
|
||||
if (!isValidUuid(website_uuid)) {
|
||||
throw new Error(`Invalid website: ${website_uuid}`);
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user