Disable token if is empty

Signed-off-by: Tamás András Horváth <[email protected]>
fphgov · May 11, 2023 · 94329a6 · 94329a6
1 parent 56e5ac2
commit 94329a6
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/App/src/Middleware/StatisticsAccountMiddleware.php b/src/App/src/Middleware/StatisticsAccountMiddleware.php
@@ -11,6 +11,8 @@
 use Psr\Http\Server\MiddlewareInterface;
 use Psr\Http\Server\RequestHandlerInterface;
 
+use function strlen;
+
 class StatisticsAccountMiddleware implements MiddlewareInterface
 {
     public function __construct(
@@ -26,7 +28,10 @@ public function process(
     ): ResponseInterface {
         $authCode = $request->getHeaderLine('Authorization');
 
-        if ($authCode !== $this->config['app']['stat']['token']) {
+        if (
+            $authCode !== $this->config['app']['stat']['token'] ||
+            strlen($authCode) === 0
+        ) {
             return new JsonResponse([
                 'message' => 'No authentication',
             ], 401);