server: Clear responses for authorization

This commit is contained in:
Elias Projahn 2020-05-08 17:55:44 +02:00
parent 7aecbbba69
commit 3a7bc24968

View file

@ -61,6 +61,7 @@ class RegisterController extends Controller {
@override @override
Future<Response> handle(Request request) async { Future<Response> handle(Request request) async {
if (request.method == 'POST') {
final json = await request.body.decode<Map<String, dynamic>>(); final json = await request.body.decode<Map<String, dynamic>>();
final requestUser = RequestUser.fromJson(json); final requestUser = RequestUser.fromJson(json);
@ -90,6 +91,9 @@ class RegisterController extends Controller {
return Response.ok(null); return Response.ok(null);
} }
} else {
return Response(HttpStatus.methodNotAllowed, null, null);
}
} }
} }
@ -166,11 +170,19 @@ class AuthorizationController extends Controller {
request.mayUpload = user.mayUpload; request.mayUpload = user.mayUpload;
request.mayEdit = user.mayEdit; request.mayEdit = user.mayEdit;
request.mayDelete = user.mayDelete; request.mayDelete = user.mayDelete;
}
}
}
}
return request;
} else {
return Response.unauthorized();
}
} else {
return Response.unauthorized();
}
} else {
return Response.badRequest();
}
} else {
return request; return request;
} }
} }
}