jennie/ghostguild-org
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor: use requireAuth in updates routes (required-auth)

Browse source
This commit is contained in:
Jennie Robinson Faber 2026-04-04 12:36:25 +01:00
parent 15fdf77be8
commit cbb519449a
4 changed files with 8 additions and 92 deletions
Download patch file Download diff file Expand all files Collapse all files

25
server/api/updates/[id].patch.js
View file

@ -1,29 +1,8 @@
import jwt from "jsonwebtoken";
import Update from "../../models/update.js";
import { connectDB } from "../../utils/mongoose.js";
export default defineEventHandler(async (event) => {
await connectDB();
const token = getCookie(event, "auth-token");
if (!token) {
throw createError({
statusCode: 401,
statusMessage: "Not authenticated",
});
}
let memberId;
try {
const decoded = jwt.verify(token, useRuntimeConfig().jwtSecret);
memberId = decoded.memberId;
} catch (err) {
throw createError({
statusCode: 401,
statusMessage: "Invalid or expired token",
});
}
const member = await requireAuth(event);
const memberId = member._id.toString();
const id = getRouterParam(event, "id");
const body = await validateBody(event, updatePatchSchema);