dennis/freed
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactors api key functionality

Browse source 
- API Key is now read from env file
- API routes won't be set up if no API key is given via ENV file
This commit is contained in:
Dennis Schoepf 2024-04-26 20:46:59 +02:00
parent 86a7caa98f
commit 08c7c1f9fa
2 changed files with 22 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

16
internal/api/auth.go
View file

@ -21,15 +21,17 @@ var (
}
)
func validateAPIKey(_ *fiber.Ctx, key string) (bool, error) {
hashedAPIKey := sha256.Sum256([]byte(apiKey))
hashedKey := sha256.Sum256([]byte(key))
func apiKeyValidator(apiKey string) func(*fiber.Ctx, string) (bool, error) {
return func(_ *fiber.Ctx, key string) (bool, error) {
hashedAPIKey := sha256.Sum256([]byte(apiKey))
hashedKey := sha256.Sum256([]byte(key))
if subtle.ConstantTimeCompare(hashedAPIKey[:], hashedKey[:]) == 1 {
return true, nil
if subtle.ConstantTimeCompare(hashedAPIKey[:], hashedKey[:]) == 1 {
return true, nil
}
return false, keyauth.ErrMissingOrMalformedAPIKey
}
return false, keyauth.ErrMissingOrMalformedAPIKey
}
func protectedRoutesFilter(ctx *fiber.Ctx) bool {