neoris/openvidu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

backend: Add API key validation to recording middleware and update routes for media retrieval

Browse Source
This commit is contained in:
Carlos Santos 2025-04-29 13:21:27 +02:00
parent 7c318f83b3
commit 473531792e
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
backend/src/middlewares/recording.middleware.ts
View File

@ -4,7 +4,7 @@ import { container } from '../config/index.js';
import { RecordingHelper } from '../helpers/index.js'; import { RecordingHelper } from '../helpers/index.js';
import { OpenViduMeetError } from '../models/error.model.js'; import { OpenViduMeetError } from '../models/error.model.js';
import { LoggerService, MeetStorageService, RoomService } from '../services/index.js'; import { LoggerService, MeetStorageService, RoomService } from '../services/index.js';
import { allowAnonymous, recordingTokenValidator, tokenAndRoleValidator, withAuth } from './auth.middleware.js'; import { allowAnonymous, apiKeyValidator, recordingTokenValidator, tokenAndRoleValidator, withAuth } from './auth.middleware.js';
export const withRecordingEnabled = async (req: Request, res: Response, next: NextFunction) => { export const withRecordingEnabled = async (req: Request, res: Response, next: NextFunction) => {
const logger = container.get(LoggerService); const logger = container.get(LoggerService);
@ -130,7 +130,7 @@ export const configureRecordingMediaAuth = async (req: Request, res: Response, n
}); });
} }
const authValidators = [tokenAndRoleValidator(UserRole.ADMIN), recordingTokenValidator]; const authValidators = [apiKeyValidator, tokenAndRoleValidator(UserRole.ADMIN), recordingTokenValidator];
if (recordingAccess === MeetRecordingAccess.PUBLIC) { if (recordingAccess === MeetRecordingAccess.PUBLIC) {
authValidators.push(allowAnonymous); authValidators.push(allowAnonymous);

2
backend/src/routes/recording.routes.ts
View File

@ -54,8 +54,8 @@ recordingRouter.delete(
); );
recordingRouter.get( recordingRouter.get(
'/:recordingId/media', '/:recordingId/media',
withValidGetMediaRequest,
configureRecordingMediaAuth, configureRecordingMediaAuth,
withValidRecordingId,
withCanRetrieveRecordingsPermission, withCanRetrieveRecordingsPermission,
recordingCtrl.getRecordingMedia recordingCtrl.getRecordingMedia
); );