watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-11 16:17:13 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Use token authentication for API requests.

Browse source
This commit is contained in:
Mike Cao 2020-09-17 22:52:20 -07:00
parent bff8806b61
commit 96bd7e5b47
34 changed files with 198 additions and 153 deletions
Download patch file Download diff file Expand all files Collapse all files

5
pages/api/websites.js
View file

@ -7,13 +7,14 @@ export default async (req, res) => {
const { user_id: current_user_id, is_admin } = req.auth;
const { user_id } = req.query;
const userId = +user_id;
if (req.method === 'GET') {
if (user_id && !is_admin) {
if (userId !== current_user_id && !is_admin) {
return unauthorized(res);
}
const websites = await getUserWebsites(+user_id || current_user_id);
const websites = await getUserWebsites(userId || current_user_id);
return ok(res, websites);
}