fix(admin): validate request param (#9)

Ensure we have an ID before attempting to delete
stemstr · Aug 9, 2023 · 4734210 · 4734210
1 parent 04a2773
commit 4734210
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/handler.go b/handler.go
@@ -99,15 +99,17 @@ func adminDeleteHandler(cfg Config, db relayer.Storage) func(http.ResponseWriter
 
 		var (
 			id = r.URL.Query().Get("id")
-			pk = r.URL.Query().Get("pubkey")
 		)
 
 		filter := nostr.Filter{}
 		if id != "" {
 			filter.IDs = []string{id}
 		}
-		if pk != "" {
-			filter.Authors = []string{pk}
+
+		if len(filter.IDs) == 0 {
+			w.WriteHeader(http.StatusBadRequest)
+			w.Write([]byte("must provide id param"))
+			return
 		}
 
 		ctx := context.Background()