feat: api authentication (#228)

konstructio · Aug 10, 2023 · 1fc97f8 · 1fc97f8
1 parent 7430bd8
commit 1fc97f8
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 3 deletions.
diff --git a/.env.example b/.env.example
@@ -5,4 +5,6 @@ DISABLE_TELEMETRY=false
 INSTALL_METHOD=helm
 IS_CLUSTER_ZERO=true
 KUBEFIRST_VERSION=1.10.7
-POSTHOG_KEY=phc_1i5RDnv8Byf9w05fV8l02GSltpDwF9iyf0ry0U0Fw4r
+POSTHOG_KEY=phc_1i5RDnv8Byf9w05fV8l02GSltpDwF9iyf0ry0U0Fw4r
+# Make sure the K1_ACCESS_TOKEN value matches the env var in the api
+K1_ACCESS_TOKEN=feedkray
diff --git a/charts/console/templates/deployment.yaml b/charts/console/templates/deployment.yaml
@@ -43,6 +43,11 @@ spec:
               value: {{ .Values.isClusterZero | default "true" | quote }}
             - name: INSTALL_METHOD
               value: {{ .Values.installMethod | default "helm" }}
+            - name: K1_ACCESS_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.existingSecret | default "kubefirst-initial-secrets" }}
+                  key: K1_ACCESS_TOKEN
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"

diff --git a/pages/api/proxy.ts b/pages/api/proxy.ts
@@ -2,7 +2,7 @@ import axios from 'axios';
 import type { NextApiRequest, NextApiResponse } from 'next';
 
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
-  const { API_URL = '' } = process.env;
+  const { API_URL = '', K1_ACCESS_TOKEN = '' } = process.env;
   const { body, url } = req.body;
   const { url: queryUrl } = req.query;
 
@@ -15,7 +15,15 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
   // eslint-disable-next-line no-console
   console.log(`METHOD: ${req.method} URL: ${kubefirstEndpointUrl}`);
   try {
-    const response = await axios({ url: kubefirstEndpointUrl, data: body, method: req.method });
+    const response = await axios({
+      url: kubefirstEndpointUrl,
+      data: body,
+      method: req.method,
+      headers: {
+        ...req.headers,
+        Authorization: `Bearer ${K1_ACCESS_TOKEN}`,
+      },
+    });
     res.status(200).json(response.data);
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
   } catch (error: any) {