update: added passphrase to validate certificate post requests

sambhavsaxena · Dec 2, 2023 · e7a6b26 · e7a6b26
1 parent 5320098
commit e7a6b26
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/backend/controllers/certificateController.js b/backend/controllers/certificateController.js
@@ -11,7 +11,10 @@ const getCertificate = asyncHandler(async (req, res) => {
 });
 
 const CreateCertificate = asyncHandler(async (req, res) => {
-  const { cid, driveURL } = req.body;
+  const { cid, driveURL, passphrase } = req.body;
+  if (passphrase !== process.env.PASSPHRASE) {
+    res.status(401).json({ message: "Unauthorized!" });
+  }
   if (!cid || !driveURL) {
     res.status(404).json({ message: "Please fill out all the fields!" });
   }