diff --git a/functions/src/shared/authentication/AdminAuth.ts b/functions/src/shared/authentication/AdminAuth.ts index 6c5570a..58b7333 100644 --- a/functions/src/shared/authentication/AdminAuth.ts +++ b/functions/src/shared/authentication/AdminAuth.ts @@ -8,13 +8,20 @@ export const AdminAuth = async ( next: NextFunction ) => { - const idToken = request.headers.authorization + const authorization = request.headers.authorization - if (!idToken) { - response.status(400).send({ message: 'Bad request' }) + if (!authorization) { + response.status(401).send() return } + const [scheme, idToken] = authorization.split(' ') + + if (scheme !== 'Bearer') { + response.status(401).send() + return + } + try { await admin.auth().verifyIdToken(idToken) next()