From bf6da62d4668b326f94e726dea4a1a42cd3567c8 Mon Sep 17 00:00:00 2001
From: Awilum <sergey.romanenko@flextype.org>
Date: Tue, 10 Aug 2021 14:22:24 +0300
Subject: [PATCH] feat(endpoints): verify access token for Utils endpoints #565

---
 src/flextype/core/Endpoints/Utils.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/flextype/core/Endpoints/Utils.php b/src/flextype/core/Endpoints/Utils.php
index 2ab56120..13ed6dfc 100644
--- a/src/flextype/core/Endpoints/Utils.php
+++ b/src/flextype/core/Endpoints/Utils.php
@@ -51,7 +51,7 @@ class Utils extends Endpoints
         $tokenData = tokens()->fetch($data['token']);
 
         // Verify access token
-        if (password_verify($tokenData['hashed_access_token'], $data['access_token'])) {
+        if (! password_verify($data['access_token'], $tokenData['hashed_access_token'])) {
             return $this->getApiResponse($response, $this->getStatusCodeMessage(401), 401);
         }