Handle API key in endpoint

This commit is contained in:
Max Wofford 2025-03-03 14:31:58 -05:00
parent 0d26dc587f
commit 7f79029250

View file

@ -18,7 +18,9 @@ class Api::V1::StatsController < ApplicationController
private
def ensure_authenticated!
bearer_token = request.headers["Authorization"].split(" ").last
return render json: { error: "Unauthorized" }, status: :unauthorized unless bearer_token == ENV["STATS_API_KEY"]
token = request.headers["Authorization"]&.split(" ")&.last
token ||= params[:api_key]
return render plain: "Unauthorized", status: :unauthorized unless token == ENV["STATS_API_KEY"]
end
end