From 8901104b9a369e6452cd9d0455ca6d6edb1575f1 Mon Sep 17 00:00:00 2001
From: orcas <daniel@makerforce.io>
Date: Thu, 4 Jul 2019 05:12:44 +0800
Subject: [PATCH] Validate endpoint input

---
 main.go | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/main.go b/main.go
index 42e3f71..ee588fd 100644
--- a/main.go
+++ b/main.go
@@ -117,9 +117,12 @@ func GetPermission(w http.ResponseWriter, r *http.Request, p httprouter.Params)
   userID := p.ByName("userid")
   conversationID := p.ByName("conversationid")
 
-  id := userID + "+" + conversationID
+  if userID == "" || conversationID == "" {
+    http.Error(w, http.StatusText(http.StatusBadRequest), http.StatusBadRequest)
+    return
+  }
 
-  exists, err := redisClient.Exists(id).Result()
+  exists, err := redisClient.Exists(userID + "+" + conversationID).Result()
   if err != nil {
     http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
     return