From 6a4f1aee179a25b62b02deffd0ad97914cbcca87 Mon Sep 17 00:00:00 2001
From: xengineering <me@xengineering.eu>
Date: Sun, 3 Mar 2024 16:56:42 +0100
Subject: Add ID to URL in recipe updates

This makes the update URL more consistent with the other ones. A check
ensures consistency of the URL and JSON ID values.
---
 controller/recipe.go | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'controller')

diff --git a/controller/recipe.go b/controller/recipe.go
index 259e3bc..e58092a 100644
--- a/controller/recipe.go
+++ b/controller/recipe.go
@@ -24,6 +24,11 @@ func RecipeUpdate(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	if recipe.Id != mux.Vars(r)[`id`] {
+		http.Error(w, "IDs in URL and JSON do not match", http.StatusBadRequest)
+		return
+	}
+
 	err = recipe.Update()
 	if err != nil {
 		http.Error(w, err.Error(), http.StatusInternalServerError)
-- 
cgit v1.2.3-70-g09d2