🐛 protect against missing story in join route

haliphax · Sep 13, 2023 · 436dac6 · 436dac6
1 parent edbc2e3
commit 436dac6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/back-end/routes/story/join.ts b/src/back-end/routes/story/join.ts
@@ -14,6 +14,11 @@ const join = (app: Application) =>
 		const storyId = r.params.story;
 		const story = await remult.repo(Story).findId(storyId);
 
+		if (!story) {
+			s.sendStatus(400);
+			return;
+		}
+
 		console.log(`User ${remult.user.id} joining ${storyId}`);
 
 		if (!story._votes?.find((v) => v.participant.id === remult.user?.id)) {