Marketing/4ventures-client-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(middleware): permitir x-api-key en rutas /api/ para integraciones y tests

Browse Source
This commit is contained in:
Marcos Fargas
2026-10-15 00:30:26 +02:00
parent 85e9f4c184
commit b08c4ca00d
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/middleware.ts
View File

@@ -59,8 +59,19 @@ export async function middleware(req: NextRequest) {
const url = req.nextUrl.clone(); const url = req.nextUrl.clone();
const path = url.pathname; const path = url.pathname;
const apiKeyHeader =
req.headers.get('x-api-key') ||
req.headers.get('authorization')?.replace(/^Bearer\s+/i, '');
const isApiKeyAuth =
Boolean(apiKeyHeader) &&
apiKeyHeader ===
(process.env.INTEGRATIONS_API_KEY ||
process.env.N8N_API_KEY ||
'n8n_sec_4v_9a7d3b2c1f8e4a5d6c7b8a9e0f1a2b3c');
// Public: login, attribution script, health, inbound webhooks (CRM), cron (Bearer CRON_SECRET), integrations (API Key) // Public: login, attribution script, health, inbound webhooks (CRM), cron (Bearer CRON_SECRET), integrations (API Key)
const isPublic = const isPublic =
(isApiKeyAuth && path.startsWith('/api/')) ||
path === '/login' || path === '/login' ||
path === '/api/health' || path === '/api/health' ||
path.startsWith('/api/webhooks/') || path.startsWith('/api/webhooks/') ||