Require authorization for Block POST

Not tested because it's impossible to follow without verbose error
messages, failing 1 test

1 files changed, 4 insertions, 3 deletions

diff --git a/src/routes.rs b/src/routes.rs
index e4bdee4..0fb61c4 100644
--- a/src/routes.rs
+++ b/src/routes.rs
@@ -10,7 +10,7 @@ pub fn consensus_routes(db: Db) -> impl Filter<Extract = impl Reply, Error = Rej
     transaction_list(db.clone())
         .or(register_user(db.clone()))
         .or(auth_transaction_propose(db.clone()))
-        .or(block_propose(db.clone()))
+        .or(auth_block_propose(db.clone()))
         .or(block_list(db.clone()))
 }
 
@@ -52,11 +52,12 @@ pub fn auth_transaction_propose(
 }
 
 /// POST /block warp route
-pub fn block_propose(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
+pub fn auth_block_propose(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
     warp::path!("block")
         .and(warp::post())
         .and(custom_filters::block_json_body())
+        .and(custom_filters::auth_header())
         .and(custom_filters::with_db(db))
-        .and_then(handlers::propose_block)
+        .and_then(handlers::auth_propose_block)
 }