more secure

dancier · Dec 21, 2023 · 7cbf05a · 7cbf05a
1 parent 302434d
commit 7cbf05a
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/main/java/net/dancier/dancer/chat/ChatController.java b/src/main/java/net/dancier/dancer/chat/ChatController.java
@@ -99,15 +99,14 @@ public ResponseEntity postMessage(
         return new ResponseEntity(HttpStatus.CREATED);
     }
 
-    @PutMapping("/messages/{messageId}/read-by/{participantId}")
+    @PutMapping("/messages/{messageId}")
     @Secured(ROLE_USER)
     public ResponseEntity putReadFlag(
             @CurrentUser AuthenticatedUser authenticatedUser,
             @PathVariable UUID messageId,
-            @PathVariable UUID participantId,
             @RequestBody SetReadFlagRequestDto setReadFlagRequestDto
             ) {
-        chatService.setReadFlag(messageId, participantId, setReadFlagRequestDto.getRead());
+        chatService.setReadFlag(messageId, authenticatedUser.getDancerIdOrThrow(), setReadFlagRequestDto.getRead());
         return new ResponseEntity(HttpStatus.NO_CONTENT);
     }