diff --git a/src/lib/middleware/api-token-middleware.ts b/src/lib/middleware/api-token-middleware.ts index 7dbd1e64e8..b3a68f5c10 100644 --- a/src/lib/middleware/api-token-middleware.ts +++ b/src/lib/middleware/api-token-middleware.ts @@ -48,7 +48,12 @@ const apiAccessMiddleware = ( } try { - const apiToken = req.header('authorization'); + const apiToken = req.header('x-unleash-auth') + ? req.header('x-unleash-auth') + : req.header('authorization'); + + console.log('TOKEN', apiToken, req.headers); + if (!apiToken?.startsWith('user:')) { const apiUser = apiToken ? apiTokenService.getUserForToken(apiToken) diff --git a/src/lib/middleware/authorization-middleware.ts b/src/lib/middleware/authorization-middleware.ts index 1f79253ff3..2d29338413 100644 --- a/src/lib/middleware/authorization-middleware.ts +++ b/src/lib/middleware/authorization-middleware.ts @@ -20,7 +20,7 @@ const authorizationMiddleware = ( if (req.user) { return next(); } - if (req.header('authorization')) { + if (req.header('x-unleash-auth') || req.header('authorization')) { // API clients should get 401 with a basic body const error = new UnauthorizedError( 'You must log in to use Unleash.',