public-offering
/
cal.pub0.org
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: dont replace cal_

pull/9078/head
Agusti Fernandez Pardo 2022-05-18 21:48:13 +02:00
parent 780fd401db
commit 27053e7c80
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/helpers/verifyApiKey.ts
View File

@ -23,10 +23,7 @@ export const dateNotInPast = function (date: Date) {
export const verifyApiKey: NextMiddleware = async (req, res, next) => { export const verifyApiKey: NextMiddleware = async (req, res, next) => {
if (!req.query.apiKey) return res.status(401).json({ message: "No apiKey provided" }); if (!req.query.apiKey) return res.status(401).json({ message: "No apiKey provided" });
// We remove the prefix from the user provided api_key. If no env set default to "cal_" // We remove the prefix from the user provided api_key. If no env set default to "cal_"
let strippedApiKey = `${req.query.apiKey}`.replace(process.env.API_KEY_PREFIX, ""); const strippedApiKey = `${req.query.apiKey}`.replace(process.env.API_KEY_PREFIX || "cal_", "");
strippedApiKey = strippedApiKey.includes("cal_")
? strippedApiKey.replace("cal_", "")
: strippedApiKey;
// Hash the key again before matching against the database records. // Hash the key again before matching against the database records.
const hashedKey = hashAPIKey(strippedApiKey); const hashedKey = hashAPIKey(strippedApiKey);
// Check if the hashed api key exists in database. // Check if the hashed api key exists in database.