kofi: don't let "blahblahblah" be considered a valid token

2022-11-17 11:12:32 -06:00 · 2022-11-17 11:12:32 -06:00 · 8414cec5d5
parent ac0b1d8482
commit 8414cec5d5
1 changed files with 1 additions and 0 deletions
--- a/files/routes/users.py
+++ b/files/routes/users.py
@ -1054,6 +1054,7 @@ def bid_list(v, bid):

@app.post("/kofi")
 def kofi():
+	if not KOFI_TOKEN or KOFI_TOKEN == DEFAULT_CONFIG_VALUE: abort(404)
 	data = json.loads(request.values['data'])
 	verification_token = data['verification_token']
 	if verification_token != KOFI_TOKEN: abort(400)