back: fix missing token active check

SafeHavenMaps · Nov 9, 2024 · 9c6f1ba · 9c6f1ba
1 parent 09f330b
commit 9c6f1ba
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/backend/src/api.rs b/backend/src/api.rs
@@ -198,6 +198,7 @@ pub enum AppError {
     Database(sqlx::Error),
     InvalidPagination,
     Internal(Option<String>),
+    NotFound,
 }
 
 #[derive(FromRequest)]
@@ -226,6 +227,7 @@ impl IntoResponse for AppError {
             AppError::BadUsernameOrPassword => (StatusCode::NOT_FOUND, "user_not_found", None),
             AppError::TokenValidation => (StatusCode::UNAUTHORIZED, "token_validation_error", None),
             AppError::Validation(ve) => (StatusCode::BAD_REQUEST, "validation_error", Some(ve)),
+            AppError::NotFound => (StatusCode::NOT_FOUND, "not_found", None),
             AppError::Database(de) => match de {
                 sqlx::Error::RowNotFound => (StatusCode::NOT_FOUND, "not_found", None),
                 _ => {

diff --git a/backend/src/api/root.rs b/backend/src/api/root.rs
@@ -172,6 +172,9 @@ async fn bootstrap(
 ) -> Result<AppJson<BootstrapResponse>, AppError> {
     tracing::trace!("Bootstrapping");
     let access_token = AccessToken::get(token, &mut conn).await?;
+    if !access_token.active{
+        return Err(AppError::NotFound)
+    }
 
     // Process the token request
     let perms: crate::models::access_token::Permissions = access_token.permissions.0;