From 9c329e31bec6b43f8b1d70d4db6ffd8ab9121066 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Madis=20M=C3=A4gi?= <madis.magi@k-space.ee>
Date: Fri, 18 Aug 2023 03:55:50 +0300
Subject: [PATCH] Check api key for swipe

---
 inventory-app/doorboy.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/inventory-app/doorboy.py b/inventory-app/doorboy.py
index afc7264..6ba82cd 100644
--- a/inventory-app/doorboy.py
+++ b/inventory-app/doorboy.py
@@ -10,6 +10,7 @@ from wtforms.validators import DataRequired
 
 import pytz
 import const
+from api import check_api_key
 from common import spam, User
 from oidc import login_required, read_user
 
@@ -300,6 +301,7 @@ class FormSwipe(FlaskForm):
     timestamp = DateTimeField('timestamp')
 
 @page_doorboy.route("/m/doorboy/swipe", methods=["POST"])
+@check_api_key
 def view_swipe():
     form = request.json
     print(form)