add auth for /meetinfo endpoint

HiveTalk · Oct 1, 2024 · 9678f8a · 9678f8a
1 parent 06b34c3
commit 9678f8a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/app/src/Server.js b/app/src/Server.js
@@ -902,6 +902,13 @@ function startServer() {
         // check if user was authorized for the api call
         const { host, authorization } = req.headers;
         const api = new ServerApi(host, authorization);
+        if (!api.isAuthorized()) {
+            log.debug('HiveTalk get meetings - Unauthorized', {
+                header: req.headers,
+                body: req.body,
+            });
+            return res.status(403).json({ error: 'Unauthorized!' });
+        }
         // Get meetings
         try {
             const meetings = api.getMeetings(roomList);