Add X_API_KEY environment variable and with_api_key middleware

Rajdip019 · May 18, 2024 · 9c793ad · 9c793ad
1 parent 17cda97
commit 9c793ad
Show file tree

Hide file tree

Showing 6 changed files with 42 additions and 3 deletions.
diff --git a/.env.example b/.env.example
@@ -3,4 +3,5 @@ EMAIL_PASSWORD=my_email_password
 EMAIL=my_email
 MAIL_NAME=my_name
 SMTP_DOMAIN=smtp.gmail.com
-SMTP_PORT=587
+SMTP_PORT=587
+X_API_KEY=my_x_api_key
diff --git a/.gitignore b/.gitignore
@@ -3,3 +3,4 @@ data
 .env
 .env.local
 private_key.pem
+.errorviz-version
diff --git a/compose.yaml b/compose.yaml
@@ -18,6 +18,7 @@ services:
       MAIL_NAME: ${MAIL_NAME}
       SMTP_DOMAIN: ${SMTP_DOMAIN}
       SMTP_PORT: ${SMTP_PORT}
+      X_API_KEY: ${X_API_KEY}
     volumes:
       - ./src:/app/src
 

diff --git a/src/main.rs b/src/main.rs
@@ -1,6 +1,7 @@
 use axum::{extract::State, middleware, routing::get, Router};
 use dotenv::dotenv;
 use middlewares::res_log::main_response_mapper;
+use middlewares::with_api_key::with_api_key;
 use mongodb::Client;
 use std::error::Error;
 
@@ -35,7 +36,8 @@ async fn main() -> Result<(), Box<dyn Error>> {
         .merge(routes::user_routes::routes(State(app_state.clone())))
         .merge(routes::password_routes::routes(State(app_state.clone())))
         .merge(routes::session_routes::routes(State(app_state.clone())))
-        .layer(middleware::map_response(main_response_mapper));
+        .layer(middleware::map_response(main_response_mapper))
+        .route_layer(middleware::from_fn(with_api_key));
 
     let app = Router::new().nest("/api", routes);
 

diff --git a/src/middlewares/mod.rs b/src/middlewares/mod.rs
@@ -1 +1,2 @@
-pub mod res_log;
+pub mod res_log;
+pub mod with_api_key;
diff --git a/src/middlewares/with_api_key.rs b/src/middlewares/with_api_key.rs
@@ -0,0 +1,33 @@
+use axum::{
+    body::Body,
+    http::{Request, StatusCode},
+    middleware::Next,
+    response::Response,
+};
+use std::env;
+
+pub async fn with_api_key(req: Request<Body>, next: Next) -> Result<Response, StatusCode> {
+    println!("Checking for API key...");
+
+    let api_key = req
+        .headers()
+        .get("x-api-key")
+        .and_then(|key| key.to_str().ok());
+
+    let expected_api_key = env::var("X_API_KEY").expect("X_API_KEY must be set");
+
+
+    if let Some(key) = api_key {
+        if key == expected_api_key {
+            return Ok(next.run(req).await);
+        }
+    }
+    // error with message of x-api-key not match
+
+    Ok(Response::builder()
+        .status(StatusCode::UNAUTHORIZED)
+        .body(Body::from("Invalid API key"))
+        .unwrap())
+
+
+}