This commit is contained in:
Adisak 2025-11-12 15:24:38 +07:00
parent f035713e34
commit 129ea8c102

View file

@ -27,16 +27,14 @@ export async function expressAuthentication(
securityName: string,
_scopes?: string[],
) {
// API_KEY bypass logic (support api_key, x-api-key, apikey)
const apiKeyHeader =
request.headers["api-key"] || request.headers["x-api-key"] || request.headers["apikey"];
if (apiKeyHeader !== undefined) {
if (apiKeyHeader === process.env.API_KEY) {
return { preferred_username: "api_key_bypass", apiKeyBypass: true };
} else {
throw new HttpError(HttpStatus.FORBIDDEN, "API key ไม่ถูกต้อง");
}
}
// // API_KEY bypass logic (support api_key, x-api-key, apikey)
// const apiKeyHeader =
// request.headers["api-key"] || request.headers["x-api-key"] || request.headers["apikey"];
// if (apiKeyHeader !== undefined) {
// if (apiKeyHeader === process.env.API_KEY) {
// return { preferred_username: "api_key_bypass", apiKeyBypass: true };
// }
// }
if (process.env.NODE_ENV !== "production" && process.env.AUTH_BYPASS) {
return { preferred_username: "bypassed" };
}