fix auth middleware: case insensative wallet compare

stereosteve · stereosteve · commit 64b2275fb7ff · 2025-04-30T13:12:28.000-04:00
diff --git a/api/auth_middleware.go b/api/auth_middleware.go
@@ -122,13 +122,14 @@ func (app *ApiServer) requireAuthMiddleware(c *fiber.Ctx) error {
 		return c.Next()
 	}
 
-	if wallet != "" && wallet == authedWallet {
+	if wallet != "" && strings.EqualFold(wallet, authedWallet) {
 		return c.Next()
 	}
 
 	if app.isAuthorizedRequest(c, myId, authedWallet) {
 		return c.Next()
 	}
 
-	return fiber.NewError(fiber.StatusForbidden, "You are not authorized to make this request")
+	msg := fmt.Sprintf("You are not authorized to make this request authedUserId=%d authedWallet=%s myId=%d wallet=%s", authedUserId, authedWallet, myId, wallet)
+	return fiber.NewError(fiber.StatusForbidden, msg)
 }

Original file line number	Diff line number	Diff line change
`@@ -122,13 +122,14 @@ func (app ApiServer) requireAuthMiddleware(c fiber.Ctx) error {`
`122`	`122`	`return c.Next()`
`123`	`123`	`}`
`124`	`124`
`125`		`- if wallet != "" && wallet == authedWallet {`
	`125`	`+ if wallet != "" && strings.EqualFold(wallet, authedWallet) {`
`126`	`126`	`return c.Next()`
`127`	`127`	`}`
`128`	`128`
`129`	`129`	`if app.isAuthorizedRequest(c, myId, authedWallet) {`
`130`	`130`	`return c.Next()`
`131`	`131`	`}`
`132`	`132`
`133`		`- return fiber.NewError(fiber.StatusForbidden, "You are not authorized to make this request")`
	`133`	`+ msg := fmt.Sprintf("You are not authorized to make this request authedUserId=%d authedWallet=%s myId=%d wallet=%s", authedUserId, authedWallet, myId, wallet)`
	`134`	`+ return fiber.NewError(fiber.StatusForbidden, msg)`
`134`	`135`	`}`