Make api calls require authorization

googlefonts · Dec 16, 2023 · 30f750d · 30f750d
1 parent b23960a
commit 30f750d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/fontra/core/server.py b/src/fontra/core/server.py
@@ -208,6 +208,10 @@ async def serverInfoHandler(self, request: web.Request) -> web.Response:
         )
 
     async def webAPIHandler(self, request: web.Request) -> web.Response:
+        authToken = await self.projectManager.authorize(request)
+        if not authToken:
+            raise web.HTTPUnauthorized()
+
         functionName = request.match_info["function"]
         function = apiFunctions.get(functionName)
         if function is None: