5 Commits

Author SHA1 Message Date
05fcd4b0f8 chore(changelog): update changelog for v0.3.0
All checks were successful
Build and upload Docker release image / upload-assets (release) Successful in 2m44s
2025-05-11 09:17:10 +00:00
f7b55bb26c chore(version): bump to 0.3.0
All checks were successful
Auto Changelog & Release / detect-version-change (push) Successful in 5s
Auto Changelog & Release / changelog-only (push) Has been skipped
Auto Changelog & Release / release (push) Successful in 11s
Build and upload Docker nightly image / build-and-push (push) Successful in 2m45s
2025-05-11 11:16:53 +02:00
0d26bf4cf8 chore(changelog): update unreleased changelog 2025-05-11 09:16:38 +00:00
3299419726 feat(logging): add debug logs for key validation and request handling
Some checks failed
Auto Changelog & Release / detect-version-change (push) Successful in 5s
Auto Changelog & Release / release (push) Has been skipped
Auto Changelog & Release / changelog-only (push) Successful in 8s
Build and upload Docker nightly image / build-and-push (push) Has been cancelled
- Add debug logs for invalid and valid API key masking
- Log unsupported content types in middleware
- Log forwarded request URLs and response statuses from LT server
2025-05-11 11:16:22 +02:00
79dfbcf053 feat(utils): add utility to mask API keys
- Introduces a function to mask API keys for improved security
- Masks null or short keys entirely with asterisks
- Partially masks longer keys, retaining the first five characters
2025-05-11 11:16:11 +02:00
5 changed files with 22 additions and 1 deletions

View File

@@ -2,6 +2,13 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
## [0.3.0](https://git.0xmax42.io/maxp/lt-auth-proxy/compare/v0.2.1..v0.3.0) - 2025-05-11
### 🚀 Features
- *(logging)* Add debug logs for key validation and request handling - ([3299419](https://git.0xmax42.io/maxp/lt-auth-proxy/commit/32994197261e9ab5a46df5f90f2faed89cd68558))
- *(utils)* Add utility to mask API keys - ([79dfbcf](https://git.0xmax42.io/maxp/lt-auth-proxy/commit/79dfbcf053d613fe3fff63bfd24537a1665c9389))
## [0.2.1](https://git.0xmax42.io/maxp/lt-auth-proxy/compare/v0.1.1..v0.2.1) - 2025-05-11 ## [0.2.1](https://git.0xmax42.io/maxp/lt-auth-proxy/compare/v0.1.1..v0.2.1) - 2025-05-11
### 🚀 Features ### 🚀 Features

View File

@@ -1 +1 @@
0.2.1 0.3.0

View File

@@ -1,5 +1,6 @@
import { Middleware } from 'http-kernel/Types/mod.ts'; import { Middleware } from 'http-kernel/Types/mod.ts';
import { Env } from './env.ts'; import { Env } from './env.ts';
import { maskApiKey } from './utils.ts';
/** /**
* Middleware that checks for a valid API key via form param. * Middleware that checks for a valid API key via form param.
@@ -17,12 +18,15 @@ export const authMiddleware: Middleware = async (ctx, next) => {
const key = params.get('apiKey'); const key = params.get('apiKey');
if (!key || !Env.apiKeys.includes(key)) { if (!key || !Env.apiKeys.includes(key)) {
console.debug('Invalid API key:', maskApiKey(key));
return new Response('Forbidden – Invalid API key', { status: 403 }); return new Response('Forbidden – Invalid API key', { status: 403 });
} }
} else { } else {
console.debug('Unsupported content type:', contentType);
return new Response('Unsupported content type', { status: 415 }); return new Response('Unsupported content type', { status: 415 });
} }
console.debug('Valid API key:', maskApiKey(ctx.req.headers.get('apiKey')));
return await next(); return await next();
}; };

View File

@@ -37,12 +37,16 @@ export const handler: Handler = async (ctx) => {
const headers = new Headers(ctx.req.headers); const headers = new Headers(ctx.req.headers);
headers.delete('content-length'); headers.delete('content-length');
console.debug('Forwarding request to:', proxyUrl.toString());
const forwarded = await fetch(proxyUrl.toString(), { const forwarded = await fetch(proxyUrl.toString(), {
method: ctx.req.method, method: ctx.req.method,
headers, headers,
body, body,
}); });
console.debug('Received response from LT server:', forwarded.status);
const respHeaders = new Headers(forwarded.headers); const respHeaders = new Headers(forwarded.headers);
return new Response(forwarded.body, { return new Response(forwarded.body, {
status: forwarded.status, status: forwarded.status,

6
src/utils.ts Normal file
View File

@@ -0,0 +1,6 @@
export const maskApiKey = (key: string | null): string => {
if (!key) return '*****';
return key.length <= 5
? '*'.repeat(key.length)
: key.slice(0, 5) + '*'.repeat(key.length - 5);
};