| import type { DB } from "@superlog/db"; | |
| import { hashApiKey, isIngestApiKey } from "@superlog/db/keys"; | |
| import * as schema from "@superlog/db/schema"; | |
| import { and, eq, isNull } from "drizzle-orm"; | |
| export async function resolvePublicSourceMapUploadAuth(opts: { | |
| database: DB; | |
| method: string; | |
| path: string; | |
| token: string; | |
| }): Promise<{ projectId: string; apiKeyId: string } | null> { | |
| if (!isIngestApiKey(opts.token)) return null; | |
| if (opts.method.toUpperCase() !== "POST") return null; | |
| const match = opts.path.match( | |
| /^\/api\/v1\/projects\/([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\/sourcemaps$/, | |
| ); | |
| const projectId = match?.[1]; | |
| if (!projectId) return null; | |
| const row = await opts.database.query.apiKeys.findFirst({ | |
| where: and( | |
| eq(schema.apiKeys.keyHash, hashApiKey(opts.token)), | |
| isNull(schema.apiKeys.revokedAt), | |
| ), | |
| }); | |
| if (!row || row.projectId !== projectId) return null; | |
| return { projectId, apiKeyId: row.id }; | |
| } | |