1 files changed, 23 insertions, 3 deletions
diff --git a/crates/rocie-server/src/api/set/barcode.rs b/crates/rocie-server/src/api/set/auth/barcode.rs
index bb84bbf..1d97852 100644
--- a/crates/rocie-server/src/api/set/barcode.rs
+++ b/crates/rocie-server/src/api/set/auth/barcode.rs
@@ -1,3 +1,4 @@
+use actix_identity::Identity;
 use actix_web::{HttpResponse, Responder, Result, post, web};
 use log::debug;
 
@@ -22,20 +23,31 @@ use crate::{
             description = "Barcode id was not found",
         ),
         (
+            status = UNAUTHORIZED,
+            description = "You did not login before calling this endpoint",
+        ),
+        (
             status = INTERNAL_SERVER_ERROR,
             description = "Server encountered error",
             body = String,
         )
     ),
     params(
-        ("barcode_id" = BarcodeId, description = "The numeric value of the barcode"),
-        ("times" = u16, description = "How often to buy the barcode"),
+        (
+            "barcode_id" = BarcodeId,
+            description = "The numeric value of the barcode"
+        ),
+        (
+            "times" = u16,
+            description = "How often to buy the barcode"
+        ),
     )
 )]
 #[post("/barcode/{barcode_id}/buy/{times}")]
 pub(crate) async fn buy_barcode(
     app: web::Data<App>,
     path: web::Path<(BarcodeIdStub, u16)>,
+    _user: Identity,
 ) -> Result<impl Responder> {
     let (barcode_id, times) = path.into_inner();
 
@@ -69,13 +81,20 @@ pub(crate) async fn buy_barcode(
             description = "Barcode id was not found",
         ),
         (
+            status = UNAUTHORIZED,
+            description = "You did not login before calling this endpoint",
+        ),
+        (
             status = INTERNAL_SERVER_ERROR,
             description = "Server encountered error",
             body = String,
         )
     ),
     params(
-        ("id" = BarcodeId, description = "The numeric value of the barcode"),
+        (
+            "id" = BarcodeId,
+            description = "The numeric value of the barcode"
+        ),
     ),
     request_body = UnitAmount,
 )]
@@ -84,6 +103,7 @@ pub(crate) async fn consume_barcode(
     app: web::Data<App>,
     barcode_id: web::Path<BarcodeIdStub>,
     unit_amount: web::Json<UnitAmount>,
+    _user: Identity,
 ) -> Result<impl Responder> {
     let mut ops = Operations::new("consume barcode unit");