Merge pull request #619 from omnivore-app/content-fetch-token

Add token verification to the content-fetch service
This commit is contained in:
Jackson Harper 2022-05-13 15:50:00 -07:00 committed by GitHub
commit fa2302971a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,5 +1,3 @@
const express = require('express');
const app = express();
@ -8,12 +6,25 @@ const fetchContent = require('./fetch-content');
app.use(express.json());
app.use(express.urlencoded({ extended: true }));
if (!process.env.VERIFICATION_TOKEN) {
throw new Error('VERIFICATION_TOKEN environment variable is not set');
}
app.get('/', (req, res) => {
if (req.query.token !== process.env.VERIFICATION_TOKEN) {
console.log('query does not include valid token')
res.send(403)
return
}
fetchContent(req, res)
});
app.post('/', (req, res) => {
if (req.query.token !== process.env.VERIFICATION_TOKEN) {
console.log('query does not include valid token')
res.send(403)
return
}
fetchContent(req, res)
});