secure some end points

MSRevive · Oct 9, 2024 · f133166 · f133166
1 parent a477ebe
commit f133166
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/cmd/cmd.go b/cmd/cmd.go
@@ -199,17 +199,22 @@ func Run(args []string) (error) {
 			})
 		})
 
-		r.Get("/ping", func(w http.ResponseWriter, r *http.Request) {
-			response.OK(w, true)
-		})
 		if flags.debug {
+			r.Get("/ping", func(w http.ResponseWriter, r *http.Request) {
+				response.OK(w, true)
+			})
+
 			r.Mount("/debug", cmw.Profiler())
 		}
 	})
 
 	// Let the game server know that's it's trying to use the old API.
 	router.Route(static.OldAPIVersion, func(r chi.Router) {
 		r.Route("/", func(r chi.Router) {
+			if !flags.debug {
+				r.Use(mw.InternalAuth)
+			}
+
 			r.Get("/sc/{hash}", con.DepreciatedAPIVersion)
 			r.Get("/ban/{steamid:[0-9]+}", con.DepreciatedAPIVersion)
 			r.Get("/map/{name}/{hash}", con.DepreciatedAPIVersion)