Function resolveKeyAuth

src/middlewares.js:448–495

({ config, keyValue, maintenanceKeyValue, installationId, clientIp })

}

async function resolveKeyAuth({ config, keyValue, maintenanceKeyValue, installationId, clientIp }) {
  if (maintenanceKeyValue && maintenanceKeyValue === config.maintenanceKey) {
    if (checkIp(clientIp, config.maintenanceKeyIps || [], config.maintenanceKeyIpsStore)) {
      return new auth.Auth({ config, installationId, isMaintenance: true });
    }
    const log = config.loggerController || defaultLogger;
    log.error(
      `Request using maintenance key rejected as the request IP address '${clientIp}' is not set in Parse Server option 'maintenanceKeyIps'.`
    );
    const error = new Error();
    error.status = 403;
    error.message = 'unauthorized';
    throw error;
  }
  const masterKey = await config.loadMasterKey();
  if (keyValue === masterKey) {
    if (checkIp(clientIp, config.masterKeyIps || [], config.masterKeyIpsStore)) {
      return new auth.Auth({ config, installationId, isMaster: true });
    }
    const log = config.loggerController || defaultLogger;
    log.error(
      `Request using master key rejected as the request IP address '${clientIp}' is not set in Parse Server option 'masterKeyIps'.`
    );
    const error = new Error();
    error.status = 403;
    error.message = 'unauthorized';
    throw error;
  }
  if (
    keyValue &&
    typeof config.readOnlyMasterKey !== 'undefined' &&
    config.readOnlyMasterKey &&
    keyValue === config.readOnlyMasterKey
  ) {
    if (checkIp(clientIp, config.readOnlyMasterKeyIps || [], config.readOnlyMasterKeyIpsStore)) {
      return new auth.Auth({ config, installationId, isMaster: true, isReadOnly: true });
    }
    const log = config.loggerController || defaultLogger;
    log.error(
      `Request using read-only master key rejected as the request IP address '${clientIp}' is not set in Parse Server option 'readOnlyMasterKeyIps'.`
    );
    const error = new Error();
    error.status = 403;
    error.message = 'unauthorized';
    throw error;
  }
  return null;
}

export function handleParseAuth(appId) {
  return async (req, res, next) => {