Function validateMediaServerSecret

apps/media-server/src/lib/auth.ts:5–14

(c: MediaServerContext)

};

export function validateMediaServerSecret(c: MediaServerContext): boolean {
	const secret = process.env.MEDIA_SERVER_WEBHOOK_SECRET;
	if (!secret) {
		console.warn(
			"[media-server] MEDIA_SERVER_WEBHOOK_SECRET is not set — rejecting request. Set this env var to enable authenticated access.",
		);
		return false;
	}
	return c.req.header("x-media-server-secret") === secret;
}