grab authorization header rather than post message

2023-11-20 12:25:36 -07:00 · 2023-11-20 12:25:36 -07:00 · 88266a50e5
commit 88266a50e5
parent fcef09f104
1 changed files with 4 additions and 1 deletions
--- a/lib/chessh/web/web.ex
+++ b/lib/chessh/web/web.ex
@ -291,7 +291,10 @@ defmodule Chessh.Web.Endpoint do
  end

  post "/bots/games/:id/turn" do
-    token = conn.body_params["token"]
+    token =
+      Enum.find_value(conn.req_headers, fn {header, value} ->
+        if header === "authorization", do: value
+      end)
    attempted_move = conn.body_params["attempted_move"]

    bot = Repo.one(from(b in Bot, where: b.token == ^token))