fix(apikeys): add role validation

checkmarble · Feb 13, 2024 · d5028fb · d5028fb
1 parent dfeecfc
commit d5028fb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/usecases/api_key_usecase.go b/usecases/api_key_usecase.go
@@ -11,6 +11,7 @@ import (
 	"github.com/checkmarble/marble-backend/usecases/analytics"
 	"github.com/checkmarble/marble-backend/usecases/transaction"
 	"github.com/google/uuid"
+	"github.com/pkg/errors"
 )
 
 type ApiKeyRepository interface {
@@ -72,6 +73,10 @@ func (usecase *ApiKeyUseCase) CreateApiKey(ctx context.Context, input models.Cre
 				return models.CreatedApiKey{}, err
 			}
 
+			if input.Role != models.API_CLIENT {
+				return models.CreatedApiKey{}, errors.Wrap(models.BadParameterError, fmt.Sprintf("role %s is not supported", input.Role))
+			}
+
 			apiKeyId := uuid.NewString()
 			key := generateAPiKey()
 			if err := usecase.apiKeyRepository.CreateApiKey(ctx, tx, models.CreateApiKey{