DC/dc-project
1
1
Fork 0
Code Issues 25 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

feature #9: Add security for route "create article"

Browse Source
This commit is contained in:
Fabrice Lecomte
2019-08-23 00:03:53 +02:00
parent 5542eede27
commit 21b6a525fd
3 changed files with 36 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
src/main/kotlin/fr/dcproject/routes/Article.kt
View File

@@ -1,7 +1,11 @@
package fr.dcproject.routes
import Paths
import io.ktor.application.ApplicationCall
import io.ktor.application.call
import io.ktor.auth.authenticate
import io.ktor.auth.authentication
import io.ktor.http.HttpStatusCode
import io.ktor.locations.KtorExperimentalLocationsAPI
import io.ktor.locations.get
import io.ktor.locations.post
@@ -9,8 +13,11 @@ import io.ktor.request.receive
import io.ktor.response.respond
import io.ktor.routing.Route
import fr.dcproject.entity.Article as ArticleEntity
import fr.dcproject.entity.User as UserEntity
import fr.dcproject.repository.Article as ArticleRepository
val ApplicationCall.user get() = authentication.principal<UserEntity>()
@KtorExperimentalLocationsAPI
fun Route.article(repo: ArticleRepository) {
get<Paths.ArticlesRequest> {
@@ -22,9 +29,17 @@ fun Route.article(repo: ArticleRepository) {
call.respond(it.article)
}
post<Paths.PostArticleRequest>() {
val article = call.receive<ArticleEntity>()
repo.upsert(article)
call.respond(article)
authenticate(optional = true) {
post<Paths.PostArticleRequest>() {
// TODO replace to voter
val user = call.user
if (user == null) {
call.respond(HttpStatusCode.Unauthorized)
} else {
val article = call.receive<ArticleEntity>()
repo.upsert(article)
call.respond(article)
}
}
}
}