diff --git a/app/doorboy-proxy.py b/app/doorboy-proxy.py index 0347904..3454f84 100755 --- a/app/doorboy-proxy.py +++ b/app/doorboy-proxy.py @@ -60,6 +60,7 @@ async def view_doorboy_uids(request): @app.route("/longpoll", stream=True) async def view_longpoll(request): response = await request.respond(content_type="text/event-stream") + key = request.headers.get("KEY") if not key or key not in [DOORBOY_SECRET_FLOOR, DOORBOY_SECRET_WORKSHOP]: return text("Invalid token")