chore: auth added for events api

spaship · Feb 7, 2024 · 76e1853 · 76e1853
1 parent fefbef8
commit 76e1853
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 3 deletions.
diff --git a/middlewares/auth.js b/middlewares/auth.js
@@ -14,10 +14,22 @@ const gitlab = async function  (req, res, next) {
   if (!(await verifyGitlabSignature(req))) {
     res.status(401).send('Unauthorized');
     return;
-  }8
+  }
   next();
 };
 
+const events = async function (req, res, next) {
+  if (!(await verifyEvent(req))) {
+    res.status(401).send('Unauthorized');
+    return;
+  }
+  next();
+};
+
+const verifyEvent = async (req) => {
+  return config.gitBrokerSecret === req.headers['authorization'];
+};
+
 const verifyGithubSignature = async (req) => {
   const githubSignature = crypto.createHmac('sha256', config.githubWebhookSecret).update(JSON.stringify(req.body)).digest('hex');
   return `sha256=${githubSignature}` === req.headers['x-hub-signature-256'];
@@ -33,4 +45,4 @@ const verifyGitlabSignature =async (req) => {
   return true;
 };
 
-module.exports = { github, gitlab };
+module.exports = { github, gitlab, events };
diff --git a/routes/events.js b/routes/events.js
@@ -6,6 +6,6 @@ const router = new Router();
 /**
  * @internal webhook for gitlab
  */
-router.post('/comment', events.post);
+router.post('/comment', auth.events, events.post);
 
 module.exports = router;