Change: require method for authz

1 files changed, 4 insertions, 1 deletions

diff --git a/muck/authz.py b/muck/authz.py
index c48294c..a9d5dda 100644
--- a/muck/authz.py
+++ b/muck/authz.py
@@ -21,7 +21,10 @@ class AuthorizationChecker:
     def __init__(self, signing_key_text):
         self._tc = muck.TokenChecker(signing_key_text.strip().encode('ascii'))
 
-    def request_is_allowed(self, r, required_scopes):
+    def request_is_allowed(self, r, required_method, required_scopes):
+        if r.get_method() != required_method:
+            return False
+
         token = self._get_token(r)
         if token is None:
             return False