friends/add and del are now POST-only

This commit is contained in:
Howl 2016-11-16 18:03:47 +01:00
parent 4036772803
commit 9e57fedd80
2 changed files with 16 additions and 8 deletions

View File

@ -115,8 +115,8 @@ func Start(conf common.Conf, dbO *sqlx.DB) *gin.Engine {
gv1.GET("/users/self/settings", Method(v1.UsersSelfSettingsGET, common.PrivilegeReadConfidential)) gv1.GET("/users/self/settings", Method(v1.UsersSelfSettingsGET, common.PrivilegeReadConfidential))
// Write privilege required // Write privilege required
gv1.GET("/friends/add", Method(v1.FriendsAddGET, common.PrivilegeWrite)) gv1.POST("/friends/add", Method(v1.FriendsAddPOST, common.PrivilegeWrite))
gv1.GET("/friends/del", Method(v1.FriendsDelGET, common.PrivilegeWrite)) gv1.POST("/friends/del", Method(v1.FriendsDelPOST, common.PrivilegeWrite))
gv1.POST("/users/self/settings", Method(v1.UsersSelfSettingsPOST, common.PrivilegeWrite)) gv1.POST("/users/self/settings", Method(v1.UsersSelfSettingsPOST, common.PrivilegeWrite))
gv1.POST("/users/self/userpage", Method(v1.UserSelfUserpagePOST, common.PrivilegeWrite)) gv1.POST("/users/self/userpage", Method(v1.UserSelfUserpagePOST, common.PrivilegeWrite))
//gv1.POST("/beatmaps/rank_requests", Method(v1.BeatmapRankRequestsSubmitPOST, common.PrivilegeWrite)) //gv1.POST("/beatmaps/rank_requests", Method(v1.BeatmapRankRequestsSubmitPOST, common.PrivilegeWrite))

View File

@ -129,9 +129,13 @@ func FriendsWithGET(md common.MethodData) common.CodeMessager {
return r return r
} }
// FriendsAddGET is the GET version of FriendsAddPOST. // FriendsAddPOST adds an user to the friends.
func FriendsAddGET(md common.MethodData) common.CodeMessager { func FriendsAddPOST(md common.MethodData) common.CodeMessager {
return addFriend(md, common.Int(md.Query("id"))) var u struct {
User int `json:"user"`
}
md.RequestData.Unmarshal(&u)
return addFriend(md, u.User)
} }
func addFriend(md common.MethodData, u int) common.CodeMessager { func addFriend(md common.MethodData, u int) common.CodeMessager {
@ -174,9 +178,13 @@ func userExists(md common.MethodData, u int) (r bool) {
return return
} }
// FriendsDelGET is the GET version of FriendDelPOST. // FriendsDelPOST deletes an user's friend.
func FriendsDelGET(md common.MethodData) common.CodeMessager { func FriendsDelPOST(md common.MethodData) common.CodeMessager {
return delFriend(md, common.Int(md.Query("id"))) var u struct {
User int `json:"user"`
}
md.RequestData.Unmarshal(&u)
return delFriend(md, u.User)
} }
func delFriend(md common.MethodData, u int) common.CodeMessager { func delFriend(md common.MethodData, u int) common.CodeMessager {