ensure client_id is specified in authorize post

spacebarchat · Dec 9, 2023 · 9d266f1 · 9d266f1
1 parent c353c4f
commit 9d266f1
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/api/routes/oauth2/authorize.ts b/src/api/routes/oauth2/authorize.ts
@@ -197,6 +197,16 @@ router.post(
 		// const { client_id, scope, response_type, redirect_url } = req.query;
 		const { client_id } = req.query;
 
+		if (!client_id) {
+			throw FieldErrors({
+				client_id: {
+					code: "BASE_TYPE_REQUIRED",
+					message: req.t("common:field.BASE_TYPE_REQUIRED"),
+				},
+			});
+		}
+
+		// TODO: ensure guild_id is not an empty string
 		// TODO: captcha verification
 		// TODO: MFA verification