From 85cebd2886b4949a80702b8533304f727905a12f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Gro=C3=9F?= <git@minzkraut.com>
Date: Mon, 17 Apr 2023 17:53:12 +0200
Subject: [PATCH] API: Add missing auth check to POST /characters

---
 api/routes/characters.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/api/routes/characters.js b/api/routes/characters.js
index 4c13c08..5fa0aa4 100644
--- a/api/routes/characters.js
+++ b/api/routes/characters.js
@@ -36,6 +36,7 @@ router.get('/characters/:character_id', async (req, res) => {
 });
 
 router.post('/characters', async (req, res) => {
+    if (!isAuthorized(req, res)) { return; }
     try {
         const newCharacterData = req.body;