chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix: legg til X-Internal-Key bypass i require_iap middleware for m2m

Browse Source
This commit is contained in:
Chris Christiansen 2026-07-02 22:05:59 +00:00
parent 9d6f713df0
commit 619bcfd635
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
main.py
View File

@ -111,6 +111,10 @@ async def require_iap(request: Request, call_next):
return await call_next(request) return await call_next(request)
if request.headers.get("x-goog-authenticated-user-email"): if request.headers.get("x-goog-authenticated-user-email"):
return await call_next(request) return await call_next(request)
# M2M: X-Internal-Key bypass
_ikey = request.headers.get("X-Internal-Key", "")
if _ikey and _ikey == os.environ.get("INTERNAL_API_KEY", ""):
return await call_next(request)
# Fallback: aksepter Cloud Run identity token (Bearer) # Fallback: aksepter Cloud Run identity token (Bearer)
auth_header = request.headers.get("Authorization", "") auth_header = request.headers.get("Authorization", "")
if auth_header.startswith("Bearer "): if auth_header.startswith("Bearer "):