stripe-stateful-mock/dist/api/auth.js

A half-baked, stateful Stripe mock server

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.auth = void 0;
const basicAuthParser = require("basic-auth");
var auth;
(function (auth) {
    function authRoute(req, res, next) {
        const token = getAccessTokenFromRequest(req);
        if (!token) {
            res.status(401).send({
                error: {
                    message: "You did not provide an API key. You need to provide your API key in the Authorization header, using Bearer auth (e.g. 'Authorization: Bearer YOUR_SECRET_KEY'). See https://stripe.com/docs/api#authentication for details, or we can help at https://support.stripe.com/.",
                    type: "invalid_request_error"
                }
            });
        }
        else if (!/^sk_test_/.test(token)) {
            res.status(401).send({
                error: {
                    message: `Invalid API Key provided: ${censorAccessToken(token)}`,
                    type: "invalid_request_error"
                }
            });
        }
        else {
            next();
        }
    }
    auth.authRoute = authRoute;
    function getAccessTokenFromRequest(req) {
        const authorizationHeader = req.header("authorization");
        const basicAuth = basicAuthParser(req);
        if (authorizationHeader && authorizationHeader.startsWith("Bearer ")) {
            return /^Bearer (.*)/.exec(authorizationHeader)[1];
        }
        else if (basicAuth) {
            return basicAuth.name;
        }
        return null;
    }
    auth.getAccessTokenFromRequest = getAccessTokenFromRequest;
    function getCensoredAccessTokenFromRequest(req) {
        return censorAccessToken(getAccessTokenFromRequest(req));
    }
    auth.getCensoredAccessTokenFromRequest = getCensoredAccessTokenFromRequest;
    function censorAccessToken(token) {
        return `${token.substr(0, Math.min(token.length, 11))}${new Array(token.length - Math.min(token.length, 15)).fill("*").join("")}${token.substr(token.length - Math.min(token.length, 4))}`;
    }
    auth.censorAccessToken = censorAccessToken;
})(auth = exports.auth || (exports.auth = {}));
//# sourceMappingURL=auth.js.map