hrms-bangkok/hrms-api-org
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Merge branch 'develop' into adiDev

Browse source
This commit is contained in:
Adisak 2025-11-12 14:40:10 +07:00
commit 7ca6b28efa
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/middlewares/auth.ts
View file

@ -27,6 +27,14 @@ export async function expressAuthentication(
securityName: string,
_scopes?: string[],
) {
// API_KEY bypass logic (support api_key, x-api-key, apikey)
const apiKeyHeader =
request.headers["api-key"] || request.headers["x-api-key"] || request.headers["apikey"];
if (apiKeyHeader !== undefined) {
if (apiKeyHeader === process.env.API_KEY) {
return { preferred_username: "api_key_bypass", apiKeyBypass: true };
}
}
if (process.env.NODE_ENV !== "production" && process.env.AUTH_BYPASS) {
return { preferred_username: "bypassed" };
}