X-Git-Url: http://git.bytex64.net/?a=blobdiff_plain;f=http%2Fhttp_blerg.c;h=e994574b8d8f7b4ae6fdfd04f124aae696489541;hb=e2f51ade69169968d9d54d3b601527a51c66f6ba;hp=f4816715b6385868bb3e551000eb62cd61df6658;hpb=a65aeec9e6152703de9c770e56e689b1356cddb0;p=blerg.git

diff --git a/http/http_blerg.c b/http/http_blerg.c
index f481671..e994574 100644
--- a/http/http_blerg.c
+++ b/http/http_blerg.c
@@ -532,9 +532,13 @@ ahc_derp (void *cls, struct MHD_Connection *connection, const char *url, const c
 			return MHD_YES;
 		}
 
-		auth_logout(as->username);
-
-		return respond_JSON_Success(connection);
+		const char *given_token = MHD_lookup_connection_value(connection, MHD_COOKIE_KIND, "auth");
+		if (given_token != NULL && auth_check_token(as->username, given_token)) {
+			auth_logout(as->username);
+			return respond_JSON_Success(connection);
+		} else {
+			return respond_JSON_Failure(connection);
+		}
 	} else {
 		return respond_404(connection);
 	}