open.source/manifold
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Check that sold bet is by auth'd user

Browse Source
This commit is contained in:
James Grugett 2022-06-01 18:30:40 -05:00
parent c2f993ddf2
commit f14bb63393
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
functions/src/sell-bet.ts
View File

@ -50,6 +50,7 @@ export const sellBet = functions.runWith({ minInstances: 1 }).https.onCall(
if (!betSnap.exists) return { status: 'error', message: 'Invalid bet' } if (!betSnap.exists) return { status: 'error', message: 'Invalid bet' }
const bet = betSnap.data() as Bet const bet = betSnap.data() as Bet
if (userId !== bet.userId) return { status: 'error', message: 'Not authorized' }
if (bet.isSold) return { status: 'error', message: 'Bet already sold' } if (bet.isSold) return { status: 'error', message: 'Bet already sold' }
const newBetDoc = firestore const newBetDoc = firestore