From 58431496514f7ab9beda3ec346413d09f39d267c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Zieliski?= <bimbej@icloud.com>
Date: Thu, 6 Jun 2024 15:28:12 +0200
Subject: [PATCH] Add auth header to PowerBI Endpoint

---
 WebAPI/Controllers/LayersController.cs | 7 +++++++
 WebAPI/appsettings.Development.json    | 1 +
 WebAPI/appsettings.json                | 1 +
 3 files changed, 9 insertions(+)

diff --git a/WebAPI/Controllers/LayersController.cs b/WebAPI/Controllers/LayersController.cs
index 8d866c4..ee63689 100644
--- a/WebAPI/Controllers/LayersController.cs
+++ b/WebAPI/Controllers/LayersController.cs
@@ -103,6 +103,13 @@ namespace WebAPI.Controllers
             {
                 return Unauthorized();
             }
+
+            if (
+                !Request.Headers.TryGetValue("D-BI-AUTH", out var authKey)
+                || authKey != configuration["authKey"])
+            {
+                return Unauthorized();
+            }
             try
             {
                 return Ok(db.Layers
diff --git a/WebAPI/appsettings.Development.json b/WebAPI/appsettings.Development.json
index 4786320..3b5e335 100644
--- a/WebAPI/appsettings.Development.json
+++ b/WebAPI/appsettings.Development.json
@@ -13,6 +13,7 @@
   "GoogleClientId": "107631825312-bkfe438ehr9k9ecb2h76g802tj6advma.apps.googleusercontent.com",
   "Secret": "8393AF8EAEF8478CB738D44858690F9C7E2D19F65896DD9FBAA3EB2A6F493E80",
   "apiKey": "10763478CB738D4ecb2h76g803478CB738D4e",
+  "authKey": "0F9C7E2D19FSLOCgKexz2h76g802tj6a",
   "exportDirectory": "1eTyCUzYbzVQB8f8sbNmvnebFXyW2-axt",
   "appLogsFile": "13PuDvS3_HAYoSLOCgKexzlzIDLUilkApUF8QiJMTae0",
   "apiLocalUrl": "localhost:5400",
diff --git a/WebAPI/appsettings.json b/WebAPI/appsettings.json
index 6deea34..344cae2 100644
--- a/WebAPI/appsettings.json
+++ b/WebAPI/appsettings.json
@@ -13,6 +13,7 @@
   "GoogleClientId": "#{google-backend-login-client-id}#",
   "Secret": "#{google-backend-login-secret}#",
   "apiKey": "#{api-key}#",
+  "authKey": "#{auth-key}#",
   "exportDirectory": "#{export-directory}#",
   "appLogsFile": "#{app-logs-file}#",
   "apiLocalUrl": "#{api-local-url}#",