Function authorizeAuxiliaryHttpRequest

src/daemon/server/http-server.ts:777–823

(params: {
  req: http.IncomingMessage;
  res: http.ServerResponse;
  authHook: HttpAuthHook | null;
  expectedToken?: string;
  daemonRequest: Pick<DaemonRequest, 'command' | 'positionals'>;
})

}

async function authorizeAuxiliaryHttpRequest(params: {
  req: http.IncomingMessage;
  res: http.ServerResponse;
  authHook: HttpAuthHook | null;
  expectedToken?: string;
  daemonRequest: Pick<DaemonRequest, 'command' | 'positionals'>;
}): Promise<{ tenantId?: string } | null> {
  const { req, res, authHook, expectedToken, daemonRequest } = params;
  const token = resolveToken({}, req.headers);
  const tokenError = enforceDaemonToken(token, expectedToken);
  if (tokenError) {
    sendRestJsonError(res, tokenError);
    return null;
  }

  const syntheticRpc: JsonRpcRequest = {
    jsonrpc: '2.0',
    id: null,
    method: 'agent_device.command',
  };
  const authResult = await runHttpAuthHook(authHook, {
    headers: req.headers,
    rpcRequest: syntheticRpc,
    daemonRequest: {
      token,
      session: 'default',
      command: daemonRequest.command,
      positionals: daemonRequest.positionals,
    },
  });
  if (!authResult.ok) {
    res.statusCode = authResult.statusCode;
    res.setHeader('content-type', 'application/json');
    res.end(
      JSON.stringify({
        ok: false,
        error:
          authResult.response.error?.data?.message ??
          authResult.response.error?.message ??
          'Unauthorized',
      }),
    );
    return null;
  }

  return { tenantId: authResult.tenantId };
}

function enforceDaemonToken(
  requestToken: string,