backend: Add API key header constant and update middleware to use it
This commit is contained in:
parent
955fb90194
commit
4c8db66d58
@ -72,6 +72,9 @@ export const PARTICIPANT_TOKEN_COOKIE_NAME = 'OvMeetParticipantToken';
|
|||||||
export const ACCESS_TOKEN_COOKIE_NAME = 'OvMeetAccessToken';
|
export const ACCESS_TOKEN_COOKIE_NAME = 'OvMeetAccessToken';
|
||||||
export const REFRESH_TOKEN_COOKIE_NAME = 'OvMeetRefreshToken';
|
export const REFRESH_TOKEN_COOKIE_NAME = 'OvMeetRefreshToken';
|
||||||
|
|
||||||
|
// Headers for API requests
|
||||||
|
export const API_KEY_HEADER = 'X-API-KEY';
|
||||||
|
|
||||||
// Fixed usernames
|
// Fixed usernames
|
||||||
export const MEET_ANONYMOUS_USER = 'anonymous';
|
export const MEET_ANONYMOUS_USER = 'anonymous';
|
||||||
export const MEET_API_USER = 'api-user';
|
export const MEET_API_USER = 'api-user';
|
||||||
|
|||||||
@ -2,6 +2,7 @@ import { NextFunction, Request, RequestHandler, Response } from 'express';
|
|||||||
import { LoggerService, TokenService, UserService } from '../services/index.js';
|
import { LoggerService, TokenService, UserService } from '../services/index.js';
|
||||||
import {
|
import {
|
||||||
ACCESS_TOKEN_COOKIE_NAME,
|
ACCESS_TOKEN_COOKIE_NAME,
|
||||||
|
API_KEY_HEADER,
|
||||||
MEET_ANONYMOUS_USER,
|
MEET_ANONYMOUS_USER,
|
||||||
MEET_API_KEY,
|
MEET_API_KEY,
|
||||||
MEET_API_USER,
|
MEET_API_USER,
|
||||||
@ -110,7 +111,7 @@ export const participantTokenValidator = async (req: Request) => {
|
|||||||
|
|
||||||
// Configure API key validatior
|
// Configure API key validatior
|
||||||
export const apiKeyValidator = async (req: Request) => {
|
export const apiKeyValidator = async (req: Request) => {
|
||||||
const apiKey = req.headers['x-api-key'];
|
const apiKey = req.headers[API_KEY_HEADER];
|
||||||
|
|
||||||
if (!apiKey) {
|
if (!apiKey) {
|
||||||
throw errorUnauthorized();
|
throw errorUnauthorized();
|
||||||
|
|||||||
@ -11,13 +11,12 @@ import {
|
|||||||
MEET_USER,
|
MEET_USER,
|
||||||
MEET_SECRET,
|
MEET_SECRET,
|
||||||
MEET_ADMIN_USER,
|
MEET_ADMIN_USER,
|
||||||
MEET_ADMIN_SECRET
|
MEET_ADMIN_SECRET,
|
||||||
|
API_KEY_HEADER
|
||||||
} from '../../src/environment.js';
|
} from '../../src/environment.js';
|
||||||
import { AuthMode, AuthType, MeetRoom, UserRole, MeetRoomOptions } from '../../src/typings/ce/index.js';
|
import { AuthMode, AuthType, MeetRoom, UserRole, MeetRoomOptions } from '../../src/typings/ce/index.js';
|
||||||
import { expect } from '@jest/globals';
|
import { expect } from '@jest/globals';
|
||||||
|
|
||||||
export const API_KEY_HEADER = 'X-API-Key';
|
|
||||||
|
|
||||||
const CREDENTIALS = {
|
const CREDENTIALS = {
|
||||||
user: {
|
user: {
|
||||||
username: MEET_USER,
|
username: MEET_USER,
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user