Add logic to require the API token to be verfied in order to invalida…

…te caches
Nuxtify-drupal · May 5, 2024 · 41a7f9a · 41a7f9a
1 parent f68bb74
commit 41a7f9a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/composer.lock b/composer.lock
diff --git a/frontend/base/server/api/cache/invalidate.post.ts b/frontend/base/server/api/cache/invalidate.post.ts
@@ -1,5 +1,12 @@
+import process from 'node:process'
+
 export default defineEventHandler(async (event) => {
   const { tags } = await readBody(event)
+  const { headers } = event
+  const token = headers.get('token') ?? ''
+
+  if (token !== process.env.BACKEND_API_KEY)
+    return new Response('Unauthorized', { status: 401 })
 
   const storage = useStorage('cacheData')
   const storageKeys = await storage.getKeys()