Fixed crash on missing header

2023-10-10 00:49:29 -04:00 · 2023-10-10 00:49:29 -04:00 · 8021b9e3e2
commit 8021b9e3e2
parent acc56a0cdf
1 changed files with 4 additions and 0 deletions
--- a/app/Http/Middleware/HeaderAuth.php
+++ b/app/Http/Middleware/HeaderAuth.php
@ -15,6 +15,10 @@ class HeaderAuth
     */
    public function handle(Request $request, Closure $next): Response
    {
+        if (is_null($request->header('X-BOTAUTH'))) {
+            return response()
+                ->json(["status" => false, "message" => "Unauthorized."], 401);
+        }
        if (!hash_equals(config('bot.header_auth'), $request->header('X-BOTAUTH'))) {
            return response('Unauthorized', 401);
        }