middleware

Author: daniwebdev

src/apps/app.guard.ts

@@ -9,9 +9,7 @@ export class ApiKeyGuard implements CanActivate {
 
   private excluded = [
     /^\/$/,
-    /^\/webhook(.*)$/,
-    /^\/(.*)chart(.*)$/,
-    /^\/(.*)tradingview(.*)$/
+    /^\/webhook(.*)$/
   ];
 
   canActivate(
@@ -20,26 +18,18 @@ export class ApiKeyGuard implements CanActivate {
     const req: Request = context.switchToHttp().getRequest();
 
 
+    /* disable gurad for path in `exluded` */
     if (this.excluded.some((regex) => regex.test(req.path))) {
       return true;
     }
-    // if(this.excluded.indexOf(req.path) > -1) {
-    //   return true;
-    // }
-    // this.excluded.forEach(path => {
-    //   if(req.path.matchAll(RegExp(/path/)))
-    // });
-
-
 
+    /* catch x-api-key from header and verify with the env */
     const key = req.headers['x-api-key'] ?? req.query.api_key
-
-    console.log(req.headers);
     if(key == undefined || key == '') {
       throw new HttpException('X-API-KEY is not provided.', HttpStatus.UNAUTHORIZED);
     }
 
-    if(key != process.env.APP_API_KEY ?? 'intervest-sandbox') {
+    if(key != process.env.APP_API_KEY ?? 'sandbox') {
       throw new HttpException('X-API-KEY is not valid.', HttpStatus.UNAUTHORIZED);
     }
 

src/main.ts

@@ -36,6 +36,7 @@ async function bootstrap() {
     .addTag('Auth', "All about authentication")
     .build();
   const document = SwaggerModule.createDocument(app, config);
+
   SwaggerModule.setup('docs', app, document);
 
   await app.listen(APP_PORT);