api: guard movies/:id/subtitles

mirsella · Dec 22, 2024 · 3e31169 · 3e31169
1 parent 0c03355
commit 3e31169
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/server/api/movies/[id]/subtitles/[lang].get.ts b/server/api/movies/[id]/subtitles/[lang].get.ts
@@ -1,8 +1,11 @@
 import { parse, stringify } from "subtitle";
 import stream from "stream";
+import { getServerSession } from "#auth";
 
 export default defineEventHandler(async (event) => {
-  // TODO: check auth
+  const session = await getServerSession(event);
+  if (!session) throw createError({ statusCode: 401 });
+
   const lang = getRouterParam(event, "lang");
   const id = getRouterParam(event, "id");
   if (!lang || !id || lang.length != 2) throw createError({ statusCode: 400 });

diff --git a/server/api/movies/[id]/subtitles/index.get.ts b/server/api/movies/[id]/subtitles/index.get.ts
@@ -1,5 +1,9 @@
+import { getServerSession } from "#auth";
+
 export default defineEventHandler(async (event) => {
-  // TODO: check auth
+  const session = await getServerSession(event);
+  if (!session) throw createError({ statusCode: 401 });
+
   const id = getRouterParam(event, "id");
   const subtitles = await opensubtitles_client.subtitles({
     imdb_id: id,