From 221b7d44ace9c60e2f41a6d336b0750d51a9fe83 Mon Sep 17 00:00:00 2001
From: Thorsten Sommer <mail@tsommer.org>
Date: Fri, 2 May 2025 15:34:46 +0200
Subject: [PATCH] Added APIToken parameter to extract data function for
 improved security

---
 runtime/src/file_data.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/runtime/src/file_data.rs b/runtime/src/file_data.rs
index 29bc477a..ab1fe0c8 100644
--- a/runtime/src/file_data.rs
+++ b/runtime/src/file_data.rs
@@ -15,6 +15,7 @@ use rocket::response::stream::{EventStream, Event};
 use rocket::tokio::select;
 use rocket::serde::Serialize;
 use rocket::get;
+use crate::api_token::APIToken;
 
 #[derive(Debug, Serialize)]
 pub struct Chunk {
@@ -39,7 +40,7 @@ type Result<T> = std::result::Result<T, Box<dyn std::error::Error + Send + Sync>
 type ChunkStream = Pin<Box<dyn Stream<Item = Result<Chunk>> + Send>>;
 
 #[get("/retrieval/fs/extract?<path>")]
-pub async fn extract_data(path: String, mut end: Shutdown) -> EventStream![] {
+pub async fn extract_data(_token: APIToken, path: String, mut end: Shutdown) -> EventStream![] {
     EventStream! {
         let stream_result = stream_data(&path).await;
         match stream_result {