From 19eb5c1cb9a7c79884c2e22dbe88e5b566325c42 Mon Sep 17 00:00:00 2001
From: Ran Guin <rguin@iMac.local>
Date: Sat, 15 May 2021 14:57:20 -0700
Subject: add auth requirement for referrals

---
 routes/referrals.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/routes/referrals.js b/routes/referrals.js
index ebd9edd3..e5e19685 100644
--- a/routes/referrals.js
+++ b/routes/referrals.js
@@ -19,6 +19,7 @@ router.get('/', function(req, res, next) {
 //      { token: <uuid>, sponsor_id: <user.id>, status: "pending" }
 router.post(
   "/grant",
+  auth,
   ah(async (req, res) => {
     const {sponsor_id, expiry} = req.body
 
@@ -45,6 +46,7 @@ router.post(
 // TO FIX - change sponsor_id so that it is retrieved from current payload (NOT FROM URL)
 router.get(
   "/checkTokens/:sponsor_id",
+  auth,
   ah(async (req, res) => {
     const {sponsor_id} = req.params
 
@@ -69,6 +71,7 @@ router.get(
 //    referral token is updated with existing user_id
 router.get(
   "/verify/:user_id/:token",
+  auth,
   ah(async (req, res) => {
     const { user_id, token } = req.params;
 
-- 
cgit v1.2.3