Function api_request_authorized

packages/server/src/auth.rs:63–95

(
    config: &Config,
    method: &Method,
    headers: &HeaderMap,
    peer_is_loopback: bool,
    uri_query: Option<&str>,
)

}

pub fn api_request_authorized(
    config: &Config,
    method: &Method,
    headers: &HeaderMap,
    peer_is_loopback: bool,
    uri_query: Option<&str>,
) -> bool {
    if bearer_or_header_token(headers).is_some_and(|token| token == config.access_token) {
        return true;
    }

    if query_token_from_query(uri_query).is_some_and(|token| token == config.access_token) {
        return true;
    }

    if cookie_token(headers).is_some_and(|token| token == config.access_token) {
        return if method == Method::GET || method == Method::HEAD {
            origin_allowed_or_absent(config, headers)
        } else {
            origin_allowed(config, headers)
        };
    }

    if peer_is_loopback {
        return if method == Method::GET || method == Method::HEAD {
            true
        } else {
            origin_allowed(config, headers)
        };
    }

    false
}

pub fn preflight_response(config: &Config, headers: &HeaderMap) -> Response {
    let mut response = StatusCode::NO_CONTENT.into_response();