From 154d977ebd447fa4642b203b3242e7a3e64393fe Mon Sep 17 00:00:00 2001 From: SrGooglo Date: Thu, 13 Jul 2023 15:53:40 +0000 Subject: [PATCH] makes `/track/*/refresh-cache` endpoint auth only --- .../tracks/routes/post/:track_id/refresh-cache.js | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/packages/music_server/src/controllers/tracks/routes/post/:track_id/refresh-cache.js b/packages/music_server/src/controllers/tracks/routes/post/:track_id/refresh-cache.js index dd45450c..6488e0ec 100644 --- a/packages/music_server/src/controllers/tracks/routes/post/:track_id/refresh-cache.js +++ b/packages/music_server/src/controllers/tracks/routes/post/:track_id/refresh-cache.js @@ -1,8 +1,12 @@ import { Track } from "@shared-classes/DbModels" -import { NotFoundError } from "@shared-classes/Errors" +import { NotFoundError, AuthorizationError } from "@shared-classes/Errors" import getEnhancedLyricsFromTrack from "@services/getEnhancedLyricsFromTrack" export default async (req, res) => { + if (!req.session) { + return new AuthorizationError(req, res) + } + const { track_id } = req.params let track = await Track.findOne({