Merge pull request #23 from BeamFi/dev

[CON-34 Security] Add clientKey requirement for webhook request for b…
BeamFi · Mar 22, 2023 · f46ae3f · f46ae3f
2 parents 270ca79 + b5fe496
commit f46ae3f
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/backend/service/Beam.mo b/backend/service/Beam.mo
@@ -380,7 +380,7 @@ actor Beam {
             processHealthRequest(queryParams)
           };
           case "/zoom" {
-            processZoomReadRequest(req)
+            processZoomReadRequest(req, queryParams)
           };
           case _ Http.BadRequest()
         }
@@ -423,7 +423,11 @@ actor Beam {
     Http.JsonContent(jsonText, false)
   };
 
-  func processZoomReadRequest(req : HttpRequest) : HttpResponse {
+  func processZoomReadRequest(req : HttpRequest, queryParams : [QueryParam]) : HttpResponse {
+    if (not Http.checkKey(queryParams, "clientKey", Env.clientKey)) {
+      return Http.BadRequest()
+    };
+
     let jsonStr = Text.decodeUtf8(req.body);
 
     switch (jsonStr) {