Added Token Validation for test upload api

Issue-ID: DOVETAIL-801
Signed-off-by: Kanagaraj Manickam <kanagaraj.manickam@huawei.com>
Change-Id: I4e4d4c5fdbb16ebf79a039039bd16fa59dbb04e1

diff --git a/opnfv_testapi/resources/test_handlers.py b/opnfv_testapi/resources/test_handlers.py
index 36c4e8b..d4fc445 100644 (file)
--- a/opnfv_testapi/resources/test_handlers.py
+++ b/opnfv_testapi/resources/test_handlers.py
@@ -440,9 +440,13 @@ class TestsUploadDataHandler(GenericTestHandler):
             @raise 404: pod/project/testcase not exist
             @raise 400: body/pod_name/project_name/case_name not provided
         """
+        token = self.get_secure_cookie("token")
         openid = self.request.headers._dict['Openid']
         if openid:
             self.json_args['owner'] = openid
+        input_token = self.request.headers._dict['Token']
+        if not input_token or not input_token == token:
+            raises.Unauthorized(message.invalid_token())
 
         self._post()