API: Add missing auth check to POST /characters

2023-04-17 17:53:12 +02:00
parent aea807ca3c
commit 85cebd2886
1 changed files with 1 additions and 0 deletions
--- a/api/routes/characters.js
+++ b/api/routes/characters.js
@@ -36,6 +36,7 @@ router.get('/characters/:character_id', async (req, res) => {
 });

 router.post('/characters', async (req, res) => {
+    if (!isAuthorized(req, res)) { return; }
    try {
        const newCharacterData = req.body;