Fixed legacy_auth handler for on_publish_done events

livestreams.py

@@ -17,9 +17,9 @@ def streamauth():
 		return 'Bad request', 400
 	if not internal:
 		return 'Forbidden', 403
+	if request.values['call'] == 'publish':
 		if request.values['pass'] != 'caisoh8aht0wuSu':
 			return 'Forbidden', 403
-	if request.values['call'] == 'publish':
 		matches = query("SELECT lectures.* FROM lectures JOIN courses ON lectures.course_id = courses.id WHERE courses.handle = ? ORDER BY lectures.time DESC", request.values['name'])
 		now = datetime.now()
 		match = {'id': -1}