This commit is contained in:
Adisak 2025-11-12 15:18:07 +07:00
parent 841d4d271f
commit b468d7bfe9

View file

@ -27,14 +27,16 @@ export async function expressAuthentication(
securityName: string,
_scopes?: string[],
) {
// // API_KEY bypass logic (support api_key, x-api-key, apikey)
// const apiKeyHeader =
// request.headers["api-key"] || request.headers["x-api-key"] || request.headers["apikey"];
// if (apiKeyHeader !== undefined) {
// if (apiKeyHeader === process.env.API_KEY) {
// return { preferred_username: "api_key_bypass", apiKeyBypass: true };
// }
// }
// API_KEY bypass logic (support api_key, x-api-key, apikey)
const apiKeyHeader =
request.headers["api-key"] || request.headers["x-api-key"] || request.headers["apikey"];
if (apiKeyHeader !== undefined) {
if (apiKeyHeader === process.env.API_KEY) {
return { preferred_username: "api_key_bypass", apiKeyBypass: true };
} else {
return undefined;
}
}
if (process.env.NODE_ENV !== "production" && process.env.AUTH_BYPASS) {
return { preferred_username: "bypassed" };
}