(chore): do not allow apis to talk to thegraph

Minds · Jun 28, 2024 · c035856 · c035856
1 parent 976df95
commit c035856
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Core/Blockchain/Uniswap/Client.php b/Core/Blockchain/Uniswap/Client.php
@@ -6,6 +6,7 @@
 use Minds\Core\Http;
 use Minds\Core\Blockchain\Services\BlockFinder;
 use Minds\Core\Config\Config;
+use Minds\Core\Router\Exceptions\ForbiddenException;
 use Minds\Exceptions\ServerErrorException;
 
 class Client
@@ -264,6 +265,10 @@ public function getTokenUsdPrices(string $tokenAddress): array
      */
     private function request($query, $variables): array
     {
+        if (php_sapi_name() !== 'cli') {
+            return new ForbiddenException(); // Only CLI can call for now
+        }
+
         $graphqlEndpoint = $this->config->get('uniswap')['url'];
 
         $response = $this->http->post(