Prevent unauthorized pdf downloads

openstax · Aug 15, 2024 · 32ff625 · 32ff625
1 parent 4bac586
commit 32ff625
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/backend/app/controllers/api/v1/badge_certificate_controller.rb b/backend/app/controllers/api/v1/badge_certificate_controller.rb
@@ -1,6 +1,8 @@
 # frozen_string_literal: true
 
 class Api::V1::BadgeCertificateController < Api::V1::BaseController
+  before_action :render_unauthorized_unless_signed_in!
+
   def show
     badge_id = params[:badge_id]
     email = params[:email]