chore: Bail earlier when an invalid session is found (Fixes #15982) (#27609)

Co-authored-by: Sparky Autonomous <sparky@openclaw.ai>
2026-02-07 07:37:33 +00:00
parent 321b07ab8b
commit aa5e90ab2a
1 changed files with 5 additions and 0 deletions
@@ -54,6 +54,11 @@ const handler = async (req: NextApiRequest, res: NextApiResponse) => {
  }

  const [appName, apiEndpoint] = args;
+
+  if (apiEndpoint === "add" && !req.session?.user?.id) {
+    return res.status(401).json({ message: "You must be logged in to do this" });
+  }
+
  try {
    /* Absolute path didn't work */
    const handlerMap = (await import("@calcom/app-store/apps.server.generated")).apiHandlers;