summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFabian Mastenbroek <mail.fabianm@gmail.com>2020-11-10 23:15:52 +0100
committerFabian Mastenbroek <mail.fabianm@gmail.com>2020-11-11 00:20:03 +0100
commit192bb81e8a8e3418c0bd84b751b35b7b1192fcdc (patch)
treebd3574bf25792680ebe4492dd50d92e77f5716be
parent893a575aa3fa5b7b313c63c3a9f1e1523e775565 (diff)
Validate API version
-rwxr-xr-xapi/main.py6
1 files changed, 6 insertions, 0 deletions
diff --git a/api/main.py b/api/main.py
index 1e48ec3f..ba79d9ce 100755
--- a/api/main.py
+++ b/api/main.py
@@ -53,6 +53,8 @@ compress.init_app(FLASK_CORE_APP)
SOCKET_IO_CORE = flask_socketio.SocketIO(FLASK_CORE_APP, cors_allowed_origins="*")
+API_VERSIONS = {'v2'}
+
@FLASK_CORE_APP.route('/tokensignin', methods=['POST'])
def sign_in():
@@ -94,6 +96,10 @@ def sign_in():
def api_call(version, endpoint_path):
"""Call an API endpoint directly over HTTP."""
+ # Check whether given version is valid
+ if version not in API_VERSIONS:
+ return jsonify(error='API version not found'), 404
+
# Get path and parameters
(path, path_parameters) = path_parser.parse(version, endpoint_path)