Function authenticate_api_request

backend/src/server/middleware/auth.ts:86–116

(req: any, res: any, next: any)

}

export function authenticate_api_request(req: any, res: any, next: any) {
    const path = req.path || req.url;
    if (is_public_endpoint(path)) return next();
    if (!auth_config.api_key || auth_config.api_key === "") {
        console.warn("[AUTH] No API key configured");
        return next();
    }
    const provided = extract_api_key(req);
    if (!provided)
        return res
            .status(401)
            .json({
                error: "authentication_required",
                message: "API key required",
            });
    if (!validate_api_key(provided, auth_config.api_key))
        return res.status(403).json({ error: "invalid_api_key" });
    const client_id = get_client_id(req, provided);
    const rl = check_rate_limit(client_id);
    if (auth_config.rate_limit_enabled) {
        res.setHeader("X-RateLimit-Limit", auth_config.rate_limit_max_requests);
        res.setHeader("X-RateLimit-Remaining", rl.remaining);
        res.setHeader("X-RateLimit-Reset", Math.floor(rl.reset_time / 1000));
    }
    if (!rl.allowed)
        return res.status(429).json({
            error: "rate_limit_exceeded",
            retry_after: Math.ceil((rl.reset_time - Date.now()) / 1000),
        });
    next();
}

export function log_authenticated_request(req: any, res: any, next: any) {
    const key = extract_api_key(req);