Mirrors/koel
2
0
Fork 0
mirror of https://github.com/koel/koel synced 2024-11-10 06:34:14 +00:00
Code Issues Projects Releases Packages Wiki Activity

fix: protect invitations route

Browse source
This commit is contained in:
Phan An 2023-08-24 00:10:36 +02:00
parent 39931bf2ae
commit f2aff43038
No known key found for this signature in database
GPG key ID: A81E4477F0BB6FDC
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
routes/api.base.php
View file

@ -52,12 +52,9 @@ Route::prefix('api')->middleware('api')->group(static function (): void {
Route::get('ping', static fn () => null);
Route::get('invitations', [UserInvitationController::class, 'get']);
Route::post('invitations', [UserInvitationController::class, 'invite']);
Route::post('invitations/accept', [UserInvitationController::class, 'accept']);
Route::middleware('auth')->group(static function (): void {
Route::delete('invitations', [UserInvitationController::class, 'revoke']);
Route::post('broadcasting/auth', static function (Request $request) {
$pusher = new Pusher(
config('broadcasting.connections.pusher.key'),
@ -149,6 +146,9 @@ Route::prefix('api')->middleware('api')->group(static function (): void {
Route::get('search', ExcerptSearchController::class);
Route::get('search/songs', SongSearchController::class);
Route::post('invitations', [UserInvitationController::class, 'invite']);
Route::delete('invitations', [UserInvitationController::class, 'revoke']);
});
// Object-storage (S3) routes