From 69f961a23cb8a2196d5315105eb4a72764625351 Mon Sep 17 00:00:00 2001
From: Daniel Friesel <derf@finalrewind.org>
Date: Tue, 17 Dec 2019 20:46:17 +0100
Subject: disable import and checkin API endpoints in production mode

---
 lib/Travelynx/Controller/Api.pm     | 22 ++++++++++++++++++++++
 templates/account.html.ep           |  2 ++
 templates/api_documentation.html.ep |  4 ++++
 3 files changed, 28 insertions(+)

diff --git a/lib/Travelynx/Controller/Api.pm b/lib/Travelynx/Controller/Api.pm
index 42e4774..f541c98 100755
--- a/lib/Travelynx/Controller/Api.pm
+++ b/lib/Travelynx/Controller/Api.pm
@@ -181,6 +181,17 @@ sub travel_v1 {
 		return;
 	}
 
+	if ( $self->app->mode ne 'development' ) {
+		$self->render(
+			json => {
+				success => \0,
+				error =>
+'This feature is incomplete and only available in development mode',
+			},
+		);
+		return;
+	}
+
 	my $api_token = $payload->{token} // '';
 
 	if ( $api_token !~ qr{ ^ (?<id> \d+ ) - (?<token> .* ) $ }x ) {
@@ -361,6 +372,17 @@ sub import_v1 {
 		return;
 	}
 
+	if ( $self->app->mode ne 'development' ) {
+		$self->render(
+			json => {
+				success => \0,
+				error =>
+'This feature is incomplete and only available in development mode',
+			},
+		);
+		return;
+	}
+
 	my $api_token = $payload->{token} // '';
 
 	if ( $api_token !~ qr{ ^ (?<id> \d+ ) - (?<token> .* ) $ }x ) {
diff --git a/templates/account.html.ep b/templates/account.html.ep
index be61518..2cc7f35 100644
--- a/templates/account.html.ep
+++ b/templates/account.html.ep
@@ -170,6 +170,7 @@
 					%= end
 				</td>
 			</tr>-->
+			% if (app->mode eq 'development') {
 			<tr>
 				<th scope="row">Travel</th>
 				<td>
@@ -216,6 +217,7 @@
 					%= end
 				</td>
 			</tr>
+			% }
 		</table>
 	</div>
 </div>
diff --git a/templates/api_documentation.html.ep b/templates/api_documentation.html.ep
index cf3a57a..2e3e66d 100644
--- a/templates/api_documentation.html.ep
+++ b/templates/api_documentation.html.ep
@@ -65,6 +65,8 @@
 	</div>
 </div>
 
+% if (app->mode eq 'development') {
+
 <h2>Travel</h2>
 <div class="row">
 	<div class="col s12">
@@ -188,3 +190,5 @@
 		</p>
 	</div>
 </div>
+
+% }
-- 
cgit v1.2.3