backend: Add API key header constant and update middleware to use it

This commit is contained in:
Carlos Santos 2025-04-11 12:29:45 +02:00
parent 955fb90194
commit 4c8db66d58
3 changed files with 7 additions and 4 deletions

View File

@ -72,6 +72,9 @@ export const PARTICIPANT_TOKEN_COOKIE_NAME = 'OvMeetParticipantToken';
export const ACCESS_TOKEN_COOKIE_NAME = 'OvMeetAccessToken';
export const REFRESH_TOKEN_COOKIE_NAME = 'OvMeetRefreshToken';
// Headers for API requests
export const API_KEY_HEADER = 'X-API-KEY';
// Fixed usernames
export const MEET_ANONYMOUS_USER = 'anonymous';
export const MEET_API_USER = 'api-user';

View File

@ -2,6 +2,7 @@ import { NextFunction, Request, RequestHandler, Response } from 'express';
import { LoggerService, TokenService, UserService } from '../services/index.js';
import {
ACCESS_TOKEN_COOKIE_NAME,
API_KEY_HEADER,
MEET_ANONYMOUS_USER,
MEET_API_KEY,
MEET_API_USER,
@ -110,7 +111,7 @@ export const participantTokenValidator = async (req: Request) => {
// Configure API key validatior
export const apiKeyValidator = async (req: Request) => {
const apiKey = req.headers['x-api-key'];
const apiKey = req.headers[API_KEY_HEADER];
if (!apiKey) {
throw errorUnauthorized();

View File

@ -11,13 +11,12 @@ import {
MEET_USER,
MEET_SECRET,
MEET_ADMIN_USER,
MEET_ADMIN_SECRET
MEET_ADMIN_SECRET,
API_KEY_HEADER
} from '../../src/environment.js';
import { AuthMode, AuthType, MeetRoom, UserRole, MeetRoomOptions } from '../../src/typings/ce/index.js';
import { expect } from '@jest/globals';
export const API_KEY_HEADER = 'X-API-Key';
const CREDENTIALS = {
user: {
username: MEET_USER,