Git_Mirror/Werewolf
1
0
Fork 0
mirror of https://github.com/AlecM33/Werewolf.git synced 2025-12-26 15:57:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

refactor admin api auth

Browse Source
This commit is contained in:
AlecM33
2022-12-10 23:27:23 -05:00
parent 9ef9141513
commit fe84db12fb
2 changed files with 25 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
server/api/AdminAPI.js
View File

@@ -7,20 +7,8 @@ const gameManager = new (require('../modules/GameManager.js'))().getInstance();
const globals = require('../config/globals.js'); const globals = require('../config/globals.js');
const cors = require('cors'); const cors = require('cors');
const KEY = process.env.NODE_ENV.trim() === 'development'
? globals.MOCK_AUTH
: process.env.ADMIN_KEY;
router.use(cors(globals.CORS)); router.use(cors(globals.CORS));
router.use((req, res, next) => {
if (isAuthorized(req)) {
next();
} else {
res.status(401).send('You are not authorized to make this request.');
}
});
router.post('/sockets/broadcast', (req, res, next) => { router.post('/sockets/broadcast', (req, res, next) => {
globals.CONTENT_TYPE_VALIDATOR(req, res, next); globals.CONTENT_TYPE_VALIDATOR(req, res, next);
}); });
@@ -40,16 +28,4 @@ router.get('/games/state', function (req, res) {
res.status(200).send(gamesArray); res.status(200).send(gamesArray);
}); });
/* validates Bearer Auth */
function isAuthorized (req) {
const header = req.headers.authorization;
if (header) {
const token = header.split(/\s+/).pop() || '';
const decodedToken = Buffer.from(token, 'base64').toString();
return decodedToken.trim() === KEY.trim();
}
return false;
}
module.exports = router; module.exports = router;

28
server/modules/ServerBootstrapper.js
View File

@@ -6,6 +6,7 @@ const fs = require('fs');
const crypto = require('crypto'); const crypto = require('crypto');
const SocketManager = require('./SocketManager.js'); const SocketManager = require('./SocketManager.js');
const GameManager = require('./GameManager.js'); const GameManager = require('./GameManager.js');
const globals = require('../config/globals.js');
const { ENVIRONMENT } = require('../config/globals.js'); const { ENVIRONMENT } = require('../config/globals.js');
const rateLimit = require('express-rate-limit').default; const rateLimit = require('express-rate-limit').default;
@@ -107,9 +108,15 @@ const ServerBootstrapper = {
app.use('/api/games', games); app.use('/api/games', games);
app.use('/api/admin', admin); app.use('/api/admin', admin);
if (process.env.NODE_ENV.trim() === 'production') { app.use('/api/', standardRateLimit);
app.use('/api/', standardRateLimit);
} app.use('/api/admin', (req, res, next) => {
if (isAuthorized(req)) {
next();
} else {
res.status(401).send('You are not authorized to make this request.');
}
});
/* serve all the app's pages */ /* serve all the app's pages */
app.use('/manifest.json', standardRateLimit, (req, res) => { app.use('/manifest.json', standardRateLimit, (req, res) => {
@@ -143,4 +150,19 @@ const ServerBootstrapper = {
} }
}; };
/* validates Bearer Auth */
function isAuthorized (req) {
const KEY = process.env.NODE_ENV.trim() === 'development'
? globals.MOCK_AUTH
: process.env.ADMIN_KEY;
const header = req.headers.authorization;
if (header) {
const token = header.split(/\s+/).pop() || '';
const decodedToken = Buffer.from(token, 'base64').toString();
return decodedToken.trim() === KEY.trim();
}
return false;
}
module.exports = ServerBootstrapper; module.exports = ServerBootstrapper;