Function enforceApiKey

apps/memos-local-plugin/server/middleware/auth.ts:17–29

(
  req: IncomingMessage,
  res: ServerResponse,
  apiKey: string,
)

import { writeJson } from "./io.js";

export function enforceApiKey(
  req: IncomingMessage,
  res: ServerResponse,
  apiKey: string,
): boolean {
  const presented =
    extractBearer(req.headers["authorization"]) ??
    headerValue(req.headers["x-api-key"]) ??
    "";
  if (presented === apiKey) return true;
  writeJson(res, 401, { error: { code: "unauthenticated", message: "api key required" } });
  return false;
}

function extractBearer(h: string | string[] | undefined): string | undefined {
  const v = headerValue(h);