From 088351899e4adeacbf2b8e10908232ebc07d4214 Mon Sep 17 00:00:00 2001
From: Stefan Haslinger <stefan.haslinger@informatom.com>
Date: Fri, 25 Mar 2022 08:46:31 +0100
Subject: [PATCH] enforce token authorization

---
 .../weather_conditions_controller.ex          | 34 +++++++++++++------
 1 file changed, 23 insertions(+), 11 deletions(-)

diff --git a/lib/weather_tracker_web/controllers/weather_conditions_controller.ex b/lib/weather_tracker_web/controllers/weather_conditions_controller.ex
index 1aed138..ca4e7cd 100644
--- a/lib/weather_tracker_web/controllers/weather_conditions_controller.ex
+++ b/lib/weather_tracker_web/controllers/weather_conditions_controller.ex
@@ -11,20 +11,32 @@ defmodule WeatherTrackerWeb.WeatherConditionsController do
   def create(conn, params) do
     IO.inspect(params)
 
-    case WeatherConditions.create_entry(params) do
-      {:ok, weather_condition = %WeatherCondition{}} ->
-        Logger.debug("Successfully created a weather condition entry")
+    token =
+      get_req_header(conn, "authorization")
+      |> List.first()
 
-        conn
-        |> put_status(:created)
-        |> json(weather_condition)
+    if token == "shiqbNfVhL91JZOtqK0896BYJfZbUDrI2ERIzmoc" do
+      case WeatherConditions.create_entry(params) do
+        {:ok, weather_condition = %WeatherCondition{}} ->
+          Logger.debug("Successfully created a weather condition entry")
 
-      error ->
-        Logger.warn("Failed to create a weather entry: #{inspect(error)}")
+          conn
+          |> put_status(:created)
+          |> json(weather_condition)
 
-        conn
-        |> put_status(:unprocessable_entity)
-        |> json(%{message: "Poorly formatted payload"})
+        error ->
+          Logger.warn("Failed to create a weather entry: #{inspect(error)}")
+
+          conn
+          |> put_status(:unprocessable_entity)
+          |> json(%{message: "Poorly formatted payload"})
+      end
+    else
+      Logger.warn("No valid auth token provided")
+
+      conn
+      |> put_status(:unprocessable_entity)
+      |> json(%{message: "Auth token not valid"})
     end
   end
 end