From 4af57d98576c312542c4874360f789648664e995 Mon Sep 17 00:00:00 2001
From: InfinityPacer <160988576+InfinityPacer@users.noreply.github.com>
Date: Tue, 8 Oct 2024 17:28:30 +0800
Subject: [PATCH] feat(security): restore token validation

---
 app/api/endpoints/download.py | 6 ++++--
 app/api/endpoints/search.py   | 6 ++++--
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/app/api/endpoints/download.py b/app/api/endpoints/download.py
index d159f288..b7a1ade8 100644
--- a/app/api/endpoints/download.py
+++ b/app/api/endpoints/download.py
@@ -102,7 +102,8 @@ def start(
 
 
 @router.get("/stop/{hashString}", summary="暂停任务", response_model=schemas.Response)
-def stop(hashString: str) -> Any:
+def stop(hashString: str,
+         _: schemas.TokenPayload = Depends(verify_token)) -> Any:
     """
     暂停下载任务
     """
@@ -111,7 +112,8 @@ def stop(hashString: str) -> Any:
 
 
 @router.delete("/{hashString}", summary="删除下载任务", response_model=schemas.Response)
-def delete(hashString: str) -> Any:
+def delete(hashString: str,
+           _: schemas.TokenPayload = Depends(verify_token)) -> Any:
     """
     删除下载任务
     """
diff --git a/app/api/endpoints/search.py b/app/api/endpoints/search.py
index dea642bc..345f0b10 100644
--- a/app/api/endpoints/search.py
+++ b/app/api/endpoints/search.py
@@ -25,7 +25,8 @@ def search_latest(_: schemas.TokenPayload = Depends(verify_token)) -> Any:
 def search_by_id(mediaid: str,
                  mtype: str = None,
                  area: str = "title",
-                 season: str = None) -> Any:
+                 season: str = None,
+                 _: schemas.TokenPayload = Depends(verify_token)) -> Any:
     """
     根据TMDBID/豆瓣ID精确搜索站点资源 tmdb:/douban:/bangumi:
     """
@@ -89,7 +90,8 @@ def search_by_id(mediaid: str,
 @router.get("/title", summary="模糊搜索资源", response_model=schemas.Response)
 def search_by_title(keyword: str = None,
                     page: int = 0,
-                    site: int = None) -> Any:
+                    site: int = None,
+                    _: schemas.TokenPayload = Depends(verify_token)) -> Any:
     """
     根据名称模糊搜索站点资源，支持分页，关键词为空是返回首页资源
     """