API: Move API Key auth to middelware file
This commit is contained in:
@@ -3,6 +3,7 @@ const Sequelize = require('sequelize');
|
|||||||
const express = require('express');
|
const express = require('express');
|
||||||
const bodyParser = require('body-parser');
|
const bodyParser = require('body-parser');
|
||||||
const { Card, User, DropHistory, Character, Group } = require("../models");
|
const { Card, User, DropHistory, Character, Group } = require("../models");
|
||||||
|
const { isAuthorized } = require('./middleware/apiKeyAuth');
|
||||||
const { Op } = require('sequelize');
|
const { Op } = require('sequelize');
|
||||||
|
|
||||||
const ACCESS_TOKEN = process.env.API_ACCESS_TOKEN;
|
const ACCESS_TOKEN = process.env.API_ACCESS_TOKEN;
|
||||||
@@ -13,18 +14,6 @@ const PREFIX = '/api/v1';
|
|||||||
|
|
||||||
app.use(bodyParser.json());
|
app.use(bodyParser.json());
|
||||||
|
|
||||||
function isAuthorized(req, res=null) {
|
|
||||||
const providedToken = req.headers['apikey'];
|
|
||||||
if (providedToken !== ACCESS_TOKEN) {
|
|
||||||
if(res) {
|
|
||||||
res.status(401).json({ error: 'Unauthorized' });
|
|
||||||
}
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
router.get('/', (req, res) => {
|
router.get('/', (req, res) => {
|
||||||
const routes = router.stack
|
const routes = router.stack
|
||||||
.filter(layer => layer.route) // Filter out non-routes
|
.filter(layer => layer.route) // Filter out non-routes
|
||||||
|
|||||||
15
api/middleware/apiKeyAuth.js
Normal file
15
api/middleware/apiKeyAuth.js
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
const ACCESS_TOKEN = process.env.API_ACCESS_TOKEN;
|
||||||
|
|
||||||
|
function isAuthorized(req, res = null) {
|
||||||
|
const providedToken = req.headers['apikey'];
|
||||||
|
if (providedToken !== ACCESS_TOKEN) {
|
||||||
|
if (res) {
|
||||||
|
res.status(401).json({ error: 'Unauthorized' });
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = { isAuthorized };
|
||||||
Reference in New Issue
Block a user