budibase/packages/worker/src/middleware/check-key.js

const env = require("../environment")

module.exports = async (ctx, next) => {
  const selfHostKey =
    ctx.request.headers["x-budibase-auth"] || ctx.request.body.selfHostKey
  if (!selfHostKey || env.SELF_HOST_KEY !== selfHostKey) {
    ctx.throw(401, "Request unauthorised")
  } else {
    await next()
  }
}
Updating worker to support using a self host key, a basic level of security, stopping builder from asking for API key if currently configured for self hosting, made the default values for self hosting make sense for a basic local installation, this should be final. 2021-01-06 17:58:29 +01:00			`const env = require("../environment")`

Adding a deployment service which takes over from the lambdas in local operation, this may become part of the hosting portal if we ever decide to opensource that part of it. 2020-12-16 20:50:02 +01:00			`module.exports = async (ctx, next) => {`
When self hosting it is now possible to use a pretty URL to access the app rather than the normal appId. 2021-01-14 18:01:31 +01:00			`const selfHostKey =`
Linting. 2021-01-14 18:02:05 +01:00			`ctx.request.headers["x-budibase-auth"] \|\| ctx.request.body.selfHostKey`
When self hosting it is now possible to use a pretty URL to access the app rather than the normal appId. 2021-01-14 18:01:31 +01:00			`if (!selfHostKey \|\| env.SELF_HOST_KEY !== selfHostKey) {`
			`ctx.throw(401, "Request unauthorised")`
Updating worker to support using a self host key, a basic level of security, stopping builder from asking for API key if currently configured for self hosting, made the default values for self hosting make sense for a basic local installation, this should be final. 2021-01-06 17:58:29 +01:00			`} else {`
			`await next()`
			`}`
Adding a deployment service which takes over from the lambdas in local operation, this may become part of the hosting portal if we ever decide to opensource that part of it. 2020-12-16 20:50:02 +01:00			`}`