lockdown endpoint

cultpodcasts · Mar 6, 2024 · eac1fde · eac1fde
1 parent b804805
commit eac1fde
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -4,6 +4,7 @@ export interface Env {
 		DB: D1Database;
 		apikey: string;
 		apihost: string;
+		gatewayKey: string;
 }
 
 export default {
@@ -151,7 +152,7 @@ export default {
 														return new Response(JSON.stringify({ error: "Unable to accept" }), { headers, status: 400 });
 												}
 										});
-						} else if (request.method === "GET") {
+						} else if (request.method === "GET" && request.headers.get("key") === env.gatewayKey) {
 								let submissionIds = env.DB
 										.prepare("SELECT id FROM urls WHERE state=0");
 								let result = await submissionIds.all();