devops/encoach_frontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added protection to the exam endpoint

Browse Source
This commit is contained in:
Tiago Ribeiro
2023-04-12 16:57:15 +01:00
parent 4f7cd3c016
commit 3e77e63fe8
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/pages/api/exam/[module].ts
View File

@@ -2,10 +2,19 @@
import type {NextApiRequest, NextApiResponse} from "next"; import type {NextApiRequest, NextApiResponse} from "next";
import {app} from "@/firebase"; import {app} from "@/firebase";
import {getFirestore, collection, getDocs} from "firebase/firestore"; import {getFirestore, collection, getDocs} from "firebase/firestore";
import {withIronSessionApiRoute} from "iron-session/next";
import {sessionOptions} from "@/lib/session";
const db = getFirestore(app); const db = getFirestore(app);
export default async function handler(req: NextApiRequest, res: NextApiResponse) { export default withIronSessionApiRoute(handler, sessionOptions);
async function handler(req: NextApiRequest, res: NextApiResponse) {
if (!req.session.user) {
res.status(401).json({ok: false});
return;
}
const {module} = req.query as {module: string}; const {module} = req.query as {module: string};
const snapshot = await getDocs(collection(db, module)); const snapshot = await getDocs(collection(db, module));