diff --git a/ExpressAPI/src/middlewares/SecurityMiddleware.ts b/ExpressAPI/src/middlewares/SecurityMiddleware.ts index 37e6e4af13cb1905766ce82231ba7da531882049..347fad42743ef645c731f78ea367ac1af27b7b40 100644 --- a/ExpressAPI/src/middlewares/SecurityMiddleware.ts +++ b/ExpressAPI/src/middlewares/SecurityMiddleware.ts @@ -33,6 +33,9 @@ class SecurityMiddleware { case SecurityCheckType.EXERCISE_SECRET: isAllowed = isAllowed || (req.headers.exercisesecret as string | undefined) === req.boundParams.exercise!.secret; break; + case SecurityCheckType.ASSIGNMENT_SECRET: + isAllowed = isAllowed || (req.headers.assignmentsecret as string | undefined) === req.boundParams.assignment!.secret; + break; default: break; } diff --git a/ExpressAPI/src/types/SecurityCheckType.ts b/ExpressAPI/src/types/SecurityCheckType.ts index 3a0b733103af4604e10f917ec3edc4c7f56b3b66..8b1df516d5af0333b5326ed85254fb41d7ee98de 100644 --- a/ExpressAPI/src/types/SecurityCheckType.ts +++ b/ExpressAPI/src/types/SecurityCheckType.ts @@ -3,6 +3,7 @@ enum SecurityCheckType { ASSIGNMENT_STAFF = 'assignmentStaff', ASSIGNMENT_IS_PUBLISHED = 'assignmentIsPublished', EXERCISE_SECRET = 'exerciseSecret', + ASSIGNMENT_SECRET = 'assignmentSecret', }