fix: only allow endpoint in test mode

RocketChat · Sep 12, 2024 · cb5e7d0 · cb5e7d0
1 parent 3279158
commit cb5e7d0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/apps/meteor/app/livechat/server/api/v1/contact.ts b/apps/meteor/app/livechat/server/api/v1/contact.ts
@@ -127,6 +127,9 @@ API.v1.addRoute(
 	{ authRequired: true, permissionsRequired: ['view-livechat-contact'], validateParams: isGETOmnichannelContactsProps },
 	{
 		async get() {
+			if (process.env.TEST_MODE?.toUpperCase() !== 'TRUE') {
+				throw new Meteor.Error('error-not-allowed', 'This endpoint is only allowed in test mode');
+			}
 			const contact = await getContactById(this.queryParams.contactId);
 
 			return API.v1.success({ contact });