Method validateApiKey

controller/rest/middleware.go:11–34

(next http.Handler)

)

func (s *Service) validateApiKey(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		apiKeyHeader := r.Header.Get("x-api-key")
		if apiKeyHeader == "" {
			http.Error(w, "missing x-api-key header", http.StatusUnauthorized)
			return
		}

		// check API key
		apiKey := s.ApiKey()

		key, err := uuid.Parse(apiKeyHeader)
		switch {
		case err != nil:
			http.Error(w, "invalid api key format: must be a valid UUID", http.StatusUnprocessableEntity)
			return
		case key != apiKey:
			http.Error(w, "api key mismatch", http.StatusForbidden)
			return
		}

		next.ServeHTTP(w, r)
	})
}

func (s *Service) checkBackendMiddleware(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {