sotrage account calls security hardening

pages/api/file/getprogressobjblob.js

@@ -5,6 +5,7 @@ import {
 import _ from "lodash";
 import nextConnect from "next-connect";
 import middleware from "../middleware/middleware";
+import { hashAPIPath } from "../../../actions";
 
 const ApiProxy = nextConnect();
 ApiProxy.use(middleware);
@@ -20,22 +21,25 @@ ApiProxy.get(async (req, res) => {
         "&casefolderID=" +
         casefolderID;
 
-    // console.log(hashAPIPath(checkquerypath), checkHash);
+    //console.log(hashAPIPath(checkquerypath), checkHash);
     // console.log(hashAPIPath(checkquerypath) == "&hash=" + checkHash);
 
-    //if (hashAPIPath(checkquerypath) == "&hash=" + checkHash) {
-    const blobObj = await getProgressBlobs(containerName, casefolderID)
-        .then((data) => {
-            console.log("ertyuikjhgfg", data.path);
-            return downloadProgressFile(containerName, data.path, casefolderID);
-        })
-        .then((data) => {
-            return res.status(200).json(data);
-        });
-
-    // } else {
-    //     return res.status(400).json();
-    // }
+    if (hashAPIPath(checkquerypath) == "&hash=" + checkHash) {
+        const blobObj = await getProgressBlobs(containerName, casefolderID)
+            .then((data) => {
+                console.log("Progress blob path:", data.path);
+                return downloadProgressFile(
+                    containerName,
+                    data.path,
+                    casefolderID
+                );
+            })
+            .then((data) => {
+                return res.status(200).json(data);
+            });
+    } else {
+        return res.status(400).json();
+    }
 });
 
 export const config = {