From 7aebffa3299a2eef81390693ef8ab74f7e030637 Mon Sep 17 00:00:00 2001
From: Tanner Collin <git@tannercollin.com>
Date: Wed, 8 Sep 2021 18:41:31 +0000
Subject: [PATCH] Raise error on invalid backup key

---
 apiserver/apiserver/api/views.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apiserver/apiserver/api/views.py b/apiserver/apiserver/api/views.py
index 6fd4300..ac98466 100644
--- a/apiserver/apiserver/api/views.py
+++ b/apiserver/apiserver/api/views.py
@@ -649,6 +649,8 @@ class BackupView(views.APIView):
             cache.set(backup_user['name'], datetime.datetime.now())
 
             return redirect(backup_url)
+        elif auth_token:
+            raise exceptions.PermissionDenied()
         else:
             backup_stats = []
             for backup_user in secrets.BACKUP_TOKENS.values():