eliott/worldmonitor
1
0
Fork 0
mirror of https://github.com/koala73/worldmonitor.git synced 2026-04-25 17:14:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

debug(auth): expose full key comparison detail in Invalid API key 401 (#2313)

Browse Source
This commit is contained in:
Elie Habib
2026-03-26 23:16:29 +04:00
committed by GitHub
parent c3b0cc7813
commit 76ba102220
2 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
api/_api-key.js
View File

@@ -52,8 +52,18 @@ export function validateApiKey(req, options = {}) {
return { valid: false, required: true, error: 'API key required' };
}
if (key) {
const validKeys = (process.env.WORLDMONITOR_VALID_KEYS || '').split(',').filter(Boolean);
if (!validKeys.includes(key)) return { valid: false, required: true, error: 'Invalid API key' };
const rawEnv = process.env.WORLDMONITOR_VALID_KEYS || '';
const validKeys = rawEnv.split(',').filter(Boolean);
if (!validKeys.includes(key)) return {
valid: false, required: true, error: 'Invalid API key',
_debug: {
receivedKey: key,
receivedKeyLen: key.length,
envVarRaw: rawEnv,
parsedKeys: validKeys,
envVarLen: rawEnv.length,
},
};
}
return { valid: true, required: forceKey };
}