From 81f44d64326842753e31872c8d25e0f9a40a5be3 Mon Sep 17 00:00:00 2001
From: Sebastian Serfling <sebastian.serfling@stines.de>
Date: Tue, 10 Oct 2023 17:31:17 +0200
Subject: [PATCH] Remove API key From Console

---
 Classes/main_classes.py | 4 ++++
 main.py                 | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/Classes/main_classes.py b/Classes/main_classes.py
index 3119358..b74e560 100644
--- a/Classes/main_classes.py
+++ b/Classes/main_classes.py
@@ -60,6 +60,10 @@ class CL_GET_USER_ID(BaseModel):
     user: str
     dbname: str
 
+class CL_ADD_USER_TO_GROUP(BaseModel):
+    userID: str
+    groupID: str
+    dbname: str
 
 class CL_ADD_REPORT_GROUP(BaseModel):
     query: str
diff --git a/main.py b/main.py
index 84cce5b..f36effd 100644
--- a/main.py
+++ b/main.py
@@ -166,8 +166,8 @@ async def get_user_id(get: CL.CL_GET_USER_ID,api_key: APIKey = Depends(auth.get_
         return result[0][0]
 
 @app.post("/report/addusertogroup")
-async def get_report_group(get: CL.CL_GET_REPORT_GROUP,api_key: APIKey = Depends(auth.get_api_key)):
-    result = database(f"SELECT ID FROM `{get.dbname}`.`Gruppen` WHERE Name = '{get.group_name}'","","")
+async def get_addusertogroup(get: CL.CL_ADD_USER_TO_GROUP,api_key: APIKey = Depends(auth.get_api_key)):
+    result = database(f"INSERT INTO GruppenToUser (UserID,GruppenID) VALUES ({get.userID,get.groupID})")
     if not result:
         return False
     else: