Throw error on invalid api key

2016-10-05 22:46:17 -07:00
parent 7b7988b7d5
commit 2d741afb20
1 changed files with 2 additions and 0 deletions
--- a/server/api/middlewares/authentication.js
+++ b/server/api/middlewares/authentication.js
@@ -50,6 +50,8 @@ export default function auth({ require = true } = {}) {
          throw httpErrors.Unauthorized('Invalid api key');
        }

+        if (!apiKey) throw httpErrors.Unauthorized('Invalid token');
+
        user = await User.findOne({
          where: { id: apiKey.userId },
        });