wip

apps/www/configs/server.ts

@@ -1,4 +1,5 @@
 import {Fetcher} from '@/models/fetcher.model'
+export const nextAPIToken = process.env.NEXT_API_TOKEN || ''
 export const strapiAPI = process.env.STRAPI_API_URL || ''
 export const strapiAPIToken = process.env.STRAPI_API_TOKEN || ''
 export const strapiFetcher = new Fetcher(strapiAPI, {

apps/www/src/app/api/og/route.ts

@@ -2,7 +2,6 @@ import {addAbsoluteURLsInObject} from '@/utils/toolbox'
 import ogs from 'open-graph-scraper'
 
 export async function GET(request: Request) {
-
   const urlParam = new URL(request.url).searchParams.get('url')
   let url: string | undefined | URL = Array.isArray(urlParam) ? urlParam[0] : urlParam
 

apps/www/src/app/api/revalidate/route.ts

@@ -1,31 +1,21 @@
-import {NextResponse} from 'next/server'
+import {headers} from '@/utils/api/headers'
+import {options} from '@/utils/api/options'
+import {protectedAPI} from '@/utils/api/protected-api'
 import {revalidateTag} from 'next/cache'
 
 export async function OPTIONS() {
-  return NextResponse.json(
-    {},
-    {
-      status: 200,
-      headers: {
-        'Access-Control-Allow-Origin': 'https://cms.56k.cloud',
-        'Access-Control-Allow-Methods': 'OPTIONS',
-        'Access-Control-Allow-Headers': 'Content-Type, Authorization'
-      }
-    }
-  )
+  return options()
 }
 
-export async function GET() {
-  revalidateTag('strapi')
-  return new Response(
-    'Strapi tag revalidated',
-    {
-      status: 200,
-      headers: {
-        'Access-Control-Allow-Origin': 'https://cms.56k.cloud',
-        'Access-Control-Allow-Methods': 'GET',
-        'Access-Control-Allow-Headers': 'Content-Type, Authorization'
+export async function GET(request: Request) {
+  return protectedAPI(request, () => {
+    revalidateTag('strapi')
+    return new Response(
+      'Strapi tag revalidated',
+      {
+        status: 200,
+        headers: headers({methods: 'GET'})
       }
-    }
-  )
+    )
+  })
 }

apps/www/src/utils/api/headers.ts

@@ -0,0 +1,15 @@
+import {strapiAPI} from '../../../configs/server'
+
+export type HeaderProps = {
+  origin?: string
+  methods?: string
+  headers?: string
+}
+
+export function headers(props: HeaderProps) {
+  return {
+    'Access-Control-Allow-Origin': props.origin || strapiAPI || '*',
+    'Access-Control-Allow-Methods': props.methods || 'GET, POST, PUT, PATCH, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': props.headers || 'Content-Type, Authorization'
+  }
+}

apps/www/src/utils/api/options.ts

@@ -0,0 +1,12 @@
+import {NextResponse} from 'next/server'
+import {headers} from './headers'
+
+export function options() {
+  return NextResponse.json(
+    {},
+    {
+      status: 200,
+      headers: headers({methods: 'OPTIONS'})
+    }
+  )
+}

apps/www/src/utils/api/protected-api.ts

@@ -0,0 +1,16 @@
+import {nextAPIToken} from '../../../configs/server'
+
+export function protectedAPI(request: Request, success: () => Response) {
+  const token = request.headers.get('Authorization')
+  if (token === nextAPIToken) {
+    return success()
+  } else {
+    return new Response(
+      'Unauthorized',
+      {
+        status: 401,
+        statusText: 'Unauthorized'
+      }
+    )
+  }
+}