Use new mustBeAuthenticated middleware.

This commit is contained in:
2020-03-10 00:20:32 +01:00
parent 9b7894ca7d
commit 1ce0d02b72
2 changed files with 6 additions and 11 deletions

View File

@@ -7,6 +7,7 @@ mongoose.connect("mongodb://localhost:27017/vinlottis", {
});
const sub = require(path.join(__dirname + "/../api/subscriptions"));
const mustBeAuthenticated = require(path.join(__dirname + "/../middleware/mustBeAuthenticated"))
const Subscription = require(path.join(__dirname + "/../schemas/Subscription"));
const Purchase = require(path.join(__dirname + "/../schemas/Purchase"));
@@ -20,11 +21,7 @@ router.use((req, res, next) => {
next();
});
router.route("/log/wines").post(async (req, res) => {
if (!req.isAuthenticated()) {
res.send(false);
return;
}
router.route("/log/wines").post(mustBeAuthenticated, async (req, res) => {
const wines = req.body;
for (let i = 0; i < wines.length; i++) {
let wine = wines[i];
@@ -57,6 +54,7 @@ router.route("/log").post(async (req, res) => {
return;
}
router.route("/log").post(mustBeAuthenticated, async (req, res) => {
await PreLotteryWine.deleteMany();
const purchaseBody = req.body.purchase;