From 2d1c718378632493a9911f84ef674aec8fd42f69 Mon Sep 17 00:00:00 2001
From: Daniel Nitsikopoulos <daniel@dnitza.com>
Date: Tue, 31 Jan 2023 08:53:07 +1100
Subject: [PATCH] Add media get endpoint

---
 app/actions/media/create.rb | 3 +++
 config/routes.rb            | 1 +
 2 files changed, 4 insertions(+)

diff --git a/app/actions/media/create.rb b/app/actions/media/create.rb
index 459de79..e6520b8 100644
--- a/app/actions/media/create.rb
+++ b/app/actions/media/create.rb
@@ -3,10 +3,13 @@ module Adamantium
     module Media
       class Create < Action
         include Deps["commands.media.upload"]
+        before :authorize!
 
         def handle(req, res)
           data = req.params[:file]
 
+          halt 401 unless verify_scope(req: req, scope: :media)
+
           upload.call(file: data) do |m|
             m.failure do |v|
               res.status = 422
diff --git a/config/routes.rb b/config/routes.rb
index 4fce10e..28bdf9f 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -12,6 +12,7 @@ module Adamantium
       get "/", to: "site.config"
       post "/", to: "posts.handle"
       post "/media", to: "media.create"
+      get "/media", to: "media.show"
     end
 
     get "/", to: "site.home"