blackroad-os/backroad
9
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(api): prevent non administrator users to use admin restricted API endpoints (#3227)

Browse Source
This commit is contained in:
Anthony Lapenna
2019-10-07 16:10:51 +13:00
committed by GitHub
parent 1fbe6a12f1
commit f7480c4ad4
21 changed files with 118 additions and 93 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
api/http/handler/websocket/handler.go
View File

@@ -26,8 +26,8 @@ func NewHandler(bouncer *security.RequestBouncer) *Handler {
requestBouncer: bouncer,
}
h.PathPrefix("/websocket/exec").Handler(
bouncer.RestrictedAccess(httperror.LoggerHandler(h.websocketExec)))
bouncer.AuthenticatedAccess(httperror.LoggerHandler(h.websocketExec)))
h.PathPrefix("/websocket/attach").Handler(
bouncer.RestrictedAccess(httperror.LoggerHandler(h.websocketAttach)))
bouncer.AuthenticatedAccess(httperror.LoggerHandler(h.websocketAttach)))
return h
}