From 521189a465bdafd6eb8081d6791947a1db964426 Mon Sep 17 00:00:00 2001
From: Daniel <10026790+dnlggr@users.noreply.github.com>
Date: Tue, 28 Jun 2022 15:13:49 +0200
Subject: [PATCH] fix: add auth check

---
 jmclient/jmclient/wallet_rpc.py | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/jmclient/jmclient/wallet_rpc.py b/jmclient/jmclient/wallet_rpc.py
index 8489269..9d483a8 100644
--- a/jmclient/jmclient/wallet_rpc.py
+++ b/jmclient/jmclient/wallet_rpc.py
@@ -586,10 +586,16 @@ class JMWalletDaemon(Service):
                 if self.services["wallet"].isRunning():
                     wallet_name = self.wallet_name
                     if self.coinjoin_state == CJ_TAKER_RUNNING and self.tumbler_options is not None:
-                        logsdir = os.path.join(os.path.dirname(jm_single().config_location), "logs")
-                        sfile = os.path.join(logsdir, self.tumbler_options['schedulefile'])
-                        res, schedule = get_schedule(sfile)
-                        if not res:
+                        auth_header = request.getHeader('Authorization')
+                        if auth_header is not None:
+                            # At this point if an `auth_header` is present, it has been checked
+                            # by the call to `check_cookie_if_present` above.
+                            logsdir = os.path.join(os.path.dirname(jm_single().config_location), "logs")
+                            sfile = os.path.join(logsdir, self.tumbler_options['schedulefile'])
+                            res, schedule = get_schedule(sfile)
+                            if not res:
+                                schedule = None
+                        else:
                             schedule = None
                 else:
                     wallet_name = "not yet loaded"