Disabling completely routes if admin token not configured

2022-01-27 18:38:33 +01:00
parent 767ac9a68f
commit 12d6d9a50d
7 changed files with 22 additions and 5 deletions
@@ -15,6 +15,9 @@ export class DebugController {
        this.App.get("/dump", (res: HttpResponse, req: HttpRequest) => {
            const query = parse(req.getQuery());

+            if (ADMIN_API_TOKEN === "") {
+                return res.writeStatus("401 Unauthorized").end("No token configured!");
+            }
            if (query.token !== ADMIN_API_TOKEN) {
                return res.writeStatus("401 Unauthorized").end("Invalid token sent!");
            }