Update authEndPoint.js

victorocna · web-flow · commit a552ba58eef8 · 2019-08-02T12:56:07.000+03:00
Fix identity instance detection; without it unauthorized users can access the API
diff --git a/src/lambda/authEndPoint.js b/src/lambda/authEndPoint.js
@@ -3,7 +3,7 @@
 
 import fetch from 'node-fetch';
 export async function handler(event, context) {
-  if (!context.clientContext && !context.clientContext.identity) {
+  if (!context.clientContext || !context.clientContext.identity) {
     return {
       statusCode: 500,
       body: JSON.stringify({
