just for good measure

efdevcon · Oct 2, 2024 · 9fb543c · 9fb543c
1 parent aafb2b6
commit 9fb543c
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/devcon-api/src/controllers/push-notifications.ts b/devcon-api/src/controllers/push-notifications.ts
@@ -15,6 +15,11 @@ pushNotificationRouter.post('/send-notification', sendPushNotification)
 async function subscribeToPushNotifications(req: Request, res: Response) {
   const userId = req.session.userId
 
+  // Temporary block, we'll add auth later
+  if (process.env.NODE_ENV !== 'development') {
+    return res.status(403).send({ status: 403, message: 'Not allowed', data: null })
+  }
+
   if (!userId && process.env.NODE_ENV !== 'development') {
     return res.status(403).send({ code: 403, message: 'Login required.' })
   }
@@ -43,6 +48,11 @@ async function subscribeToPushNotifications(req: Request, res: Response) {
 async function unsubscribeFromPushNotifications(req: Request, res: Response) {
   const userId = req.session.userId
 
+  // Temporary block, we'll add auth later
+  if (process.env.NODE_ENV !== 'development') {
+    return res.status(403).send({ status: 403, message: 'Not allowed', data: null })
+  }
+
   if (!userId && process.env.NODE_ENV !== 'development') {
     return res.status(403).send({ code: 403, message: 'Login required.' })
   }

diff --git a/devcon-api/src/db/account.prisma b/devcon-api/src/db/account.prisma
@@ -55,6 +55,7 @@ model rate_limit {
 
 model PushSubscription {
   id        String   @id @default(uuid())
+  userId    String
   endpoint  String   @unique
   auth      String
   p256dh    String