fix: use admin secret to update metadata when uploading files (#54)

nhost · Apr 11, 2022 · e1ea387 · e1ea387
1 parent e5857bc
commit e1ea387
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/controller/upload_file.go b/controller/upload_file.go
@@ -92,14 +92,18 @@ func (ctrl *Controller) upload(
 
 		etag, contentType, err := ctrl.uploadSingleFile(file, file.ID)
 		if err != nil {
-			_, _ = ctrl.metadataStorage.DeleteFileByID(ctx, file.ID, request.headers)
+			_, _ = ctrl.metadataStorage.DeleteFileByID(
+				ctx,
+				file.ID,
+				http.Header{"x-hasura-admin-secret": []string{ctrl.hasuraAdminSecret}},
+			)
 			return filesMetadata, InternalServerError(fmt.Errorf("problem processing file %s: %w", file.Name, err))
 		}
 
 		metadata, apiErr := ctrl.metadataStorage.PopulateMetadata(
 			ctx,
 			file.ID, file.Name, file.header.Size, bucket.ID, etag, true, contentType,
-			request.headers,
+			http.Header{"x-hasura-admin-secret": []string{ctrl.hasuraAdminSecret}},
 		)
 		if apiErr != nil {
 			return filesMetadata, apiErr.ExtendError(fmt.Sprintf("problem populating file metadata for file %s", file.Name))