From d83543e3cc6929fa2f92c53efdae54e43595fe88 Mon Sep 17 00:00:00 2001
From: boatbomber <zack@boatbomber.com>
Date: Thu, 5 Jan 2023 11:28:37 -0500
Subject: [PATCH] Handle falsy API values

---
 plugin/src/HeadlessAPI.lua | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/plugin/src/HeadlessAPI.lua b/plugin/src/HeadlessAPI.lua
index 0268ab9e..db3c552c 100644
--- a/plugin/src/HeadlessAPI.lua
+++ b/plugin/src/HeadlessAPI.lua
@@ -201,10 +201,10 @@ function API.new(app)
 		-- Sanitize request
 		local sanitizedApis = {}
 		for _, api in apis do
-			if Rojo[api] then
+			if Rojo[api] ~= nil then
 				table.insert(sanitizedApis, api)
 			else
-				warn(string.format("Rojo.%s is not a valid API", api))
+				warn(string.format("Rojo.%s is not a valid API", tostring(api)))
 			end
 		end
 		assert(#sanitizedApis > 0, "Rojo:RequestAccess expects an array of valid API names")
@@ -329,6 +329,12 @@ function API.new(app)
 				return nil
 			end
 
+			-- Existence check
+			if Rojo[key] == nil then
+				warn(string.format("Rojo.%s is not a valid API", tostring(key)))
+				return nil
+			end
+
 			-- Permissions check
 			local granted = Rojo:_permissionCheck(key)
 			if not granted then