backend: Add API key header constant and update middleware to use it
This commit is contained in:
parent
955fb90194
commit
4c8db66d58
@ -72,6 +72,9 @@ export const PARTICIPANT_TOKEN_COOKIE_NAME = 'OvMeetParticipantToken';
|
||||
export const ACCESS_TOKEN_COOKIE_NAME = 'OvMeetAccessToken';
|
||||
export const REFRESH_TOKEN_COOKIE_NAME = 'OvMeetRefreshToken';
|
||||
|
||||
// Headers for API requests
|
||||
export const API_KEY_HEADER = 'X-API-KEY';
|
||||
|
||||
// Fixed usernames
|
||||
export const MEET_ANONYMOUS_USER = 'anonymous';
|
||||
export const MEET_API_USER = 'api-user';
|
||||
|
||||
@ -2,6 +2,7 @@ import { NextFunction, Request, RequestHandler, Response } from 'express';
|
||||
import { LoggerService, TokenService, UserService } from '../services/index.js';
|
||||
import {
|
||||
ACCESS_TOKEN_COOKIE_NAME,
|
||||
API_KEY_HEADER,
|
||||
MEET_ANONYMOUS_USER,
|
||||
MEET_API_KEY,
|
||||
MEET_API_USER,
|
||||
@ -110,7 +111,7 @@ export const participantTokenValidator = async (req: Request) => {
|
||||
|
||||
// Configure API key validatior
|
||||
export const apiKeyValidator = async (req: Request) => {
|
||||
const apiKey = req.headers['x-api-key'];
|
||||
const apiKey = req.headers[API_KEY_HEADER];
|
||||
|
||||
if (!apiKey) {
|
||||
throw errorUnauthorized();
|
||||
|
||||
@ -11,13 +11,12 @@ import {
|
||||
MEET_USER,
|
||||
MEET_SECRET,
|
||||
MEET_ADMIN_USER,
|
||||
MEET_ADMIN_SECRET
|
||||
MEET_ADMIN_SECRET,
|
||||
API_KEY_HEADER
|
||||
} from '../../src/environment.js';
|
||||
import { AuthMode, AuthType, MeetRoom, UserRole, MeetRoomOptions } from '../../src/typings/ce/index.js';
|
||||
import { expect } from '@jest/globals';
|
||||
|
||||
export const API_KEY_HEADER = 'X-API-Key';
|
||||
|
||||
const CREDENTIALS = {
|
||||
user: {
|
||||
username: MEET_USER,
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user