Fix empty api key handling

2023-08-02 01:37:19 +03:00 · 2023-08-02 01:37:19 +03:00 · ff8f5eae36
commit ff8f5eae36
parent 3d7025ee4b
1 changed files with 2 additions and 0 deletions
--- a/inventory-app/api.py
+++ b/inventory-app/api.py
@ -15,6 +15,8 @@ def check_api_key(f):
    @wraps(f)
    def decorated_function(*args, **kwargs):
        request_key = request.headers.get('Authorization', False)
+        if not request_key:
+            return "nope", 403
        found_key = re.search(r"Basic (.*)", request_key).group(1)
        if not found_key or found_key != api_key:
            return "nope", 403