Merge pull request #52 from gfx/avoid_500_if_auth_config_missing

avoid nil errors in API authentication
cookpad · Apr 11, 2017 · 6a6e1a8 · 6a6e1a8
2 parents 3416466 + 303c818
commit 6a6e1a8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/kuroko2/api/application_controller.rb b/app/controllers/kuroko2/api/application_controller.rb
@@ -31,7 +31,7 @@ def respond_with_error(status_code, error_code, message)
   def api_authentication
     service_name = authenticate_with_http_basic do |name, api_key|
       stored = Kuroko2.config.api_basic_authentication_applications.try!(name.to_sym)
-      if Rack::Utils.secure_compare(api_key, stored)
+      if stored && Rack::Utils.secure_compare(api_key, stored)
         name.to_sym
       else
         nil