From bc410e93a523ffe7049a8283b6d0f3db5127ad6c Mon Sep 17 00:00:00 2001
From: Thomas Rubini <74205383+ThomasRubini@users.noreply.github.com>
Date: Thu, 1 Dec 2022 10:35:12 +0100
Subject: [PATCH 1/2] allow POST requests on the API

---
 truthseeker/routes/routes_api.py | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/truthseeker/routes/routes_api.py b/truthseeker/routes/routes_api.py
index 52e5467..81ecfe1 100644
--- a/truthseeker/routes/routes_api.py
+++ b/truthseeker/routes/routes_api.py
@@ -29,7 +29,7 @@ def jwt_required(f):
 
 
 
-@routes_api.route("/createGame")
+@routes_api.route("/createGame", methods=["GET", "POST"])
 def create_game():
     username = flask.request.args.get("username")
     if username==None:
@@ -44,7 +44,7 @@ def create_game():
     response["jwt"] = owner_jwt
     return response
     
-@routes_api.route("/joinGame")
+@routes_api.route("/joinGame", methods=["GET", "POST"])
 def join_game():
     game_id = flask.request.args.get("game_id")
     username = flask.request.args.get("username")
@@ -62,7 +62,7 @@ def join_game():
     response["jwt"] = member_jwt
     return response
 
-@routes_api.route("/getGameInfo")
+@routes_api.route("/getGameInfo", methods=["GET", "POST"])
 def get_game_info(): # DEPRECATED, SHOULD BE REMOVED
     response = {}
     game_id = flask.request.args.get("game_id")
@@ -79,7 +79,7 @@ def get_game_info(): # DEPRECATED, SHOULD BE REMOVED
         response["token"] = game.start_token
         return response
     
-@routes_api.route("/startGame")
+@routes_api.route("/startGame", methods=["GET", "POST"])
 @jwt_required
 def start_game(claims):
     if not claims["owner"]:

From cb529c558e23df7f6a27b6a3575338ce4f82beda Mon Sep 17 00:00:00 2001
From: Thomas Rubini <74205383+ThomasRubini@users.noreply.github.com>
Date: Thu, 1 Dec 2022 10:43:41 +0100
Subject: [PATCH 2/2] use request.values instead of request.args

---
 truthseeker/routes/routes_api.py | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/truthseeker/routes/routes_api.py b/truthseeker/routes/routes_api.py
index 81ecfe1..1a61201 100644
--- a/truthseeker/routes/routes_api.py
+++ b/truthseeker/routes/routes_api.py
@@ -12,7 +12,7 @@ routes_api = flask.Blueprint("api", __name__)
 def jwt_required(f):
     @wraps(f)
     def decorator(*args, **kwargs):
-        jwt_str = flask.request.args.get("jwt")
+        jwt_str = flask.request.values.get("jwt")
         if not jwt_str:
             return {"status": "Error, JWT token missing"}, 401
 
@@ -31,7 +31,7 @@ def jwt_required(f):
 
 @routes_api.route("/createGame", methods=["GET", "POST"])
 def create_game():
-    username = flask.request.args.get("username")
+    username = flask.request.values.get("username")
     if username==None:
         return {"status": "error, username not set"}
 
@@ -46,8 +46,8 @@ def create_game():
     
 @routes_api.route("/joinGame", methods=["GET", "POST"])
 def join_game():
-    game_id = flask.request.args.get("game_id")
-    username = flask.request.args.get("username")
+    game_id = flask.request.values.get("game_id")
+    username = flask.request.values.get("username")
     if game_id==None or username==None:
         return {"status": "error, username or game id not set"}
 
@@ -65,7 +65,7 @@ def join_game():
 @routes_api.route("/getGameInfo", methods=["GET", "POST"])
 def get_game_info(): # DEPRECATED, SHOULD BE REMOVED
     response = {}
-    game_id = flask.request.args.get("game_id")
+    game_id = flask.request.values.get("game_id")
     if game_id == None:
         response["status"] = "No 'game_id' argument"
         return response