Commitbde71ca

committed

auth on test notification endpoint

1 parentef4f795 commitbde71caCopy full SHA for bde71ca

File tree

-0

lines changed

-0

lines changed

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -428,6 +428,12 @@ func (api API) postUserPushNotificationTest(rw http.ResponseWriter, r http.Req`
`428`	`428`	`return`
`429`	`429`	`}`
`430`	`430`
	`431`	`+// We need to authorize the user to send a push notification to themselves.`
	`432`	`+if!api.Authorize(r,policy.ActionCreate,rbac.ResourceNotificationMessage.WithOwner(user.ID.String())) {`
	`433`	`+httpapi.Forbidden(rw)`
	`434`	`+return`
	`435`	`+}`
	`436`	`+`
`431`	`437`	`iferr:=api.WebpushDispatcher.Dispatch(ctx,user.ID, codersdk.WebpushMessage{`
`432`	`438`	`Title:"It's working!",`
`433`	`439`	`Body:"You've subscribed to push notifications.",`

Comments

(0)