Merge pull request #1 from RustLangES/api-secure

Use bot API-KEY

Author: SergioRibera

.github/workflows/deploy.yml

@@ -40,6 +40,7 @@ jobs:
         uses: cloudflare/wrangler-action@v3
         env:
           ENDPOINT: ${{ secrets.ENDPOINT }}
+          BOT_APIKEY: ${{ secrets.BOT_APIKEY }}
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

README.md

@@ -24,6 +24,7 @@ Para construir y desplegar este proyecto, necesitarás lo siguiente:
 ### Variables de Entorno
 
 - `ENDPOINT`: URL del punto final al que se enviarán los datos del reto diario.
+- `BOT_APIKEY`: Solo es necesario para nuestro caso que tenemos limitado nuestro endpoint para usuarios permitidos
 
 ### Pruebas Locales
 
@@ -36,3 +37,4 @@ Este proyecto está configurado para desplegar automáticamente utilizando los f
 - `CLOUDFLARE_ACCOUNT_ID`: ID de tu cuenta de Cloudflare.
 - `CLOUDFLARE_API_TOKEN`: Token de API de Cloudflare.
 - `ENDPOINT`: URL de la API a la que se enviarán los datos del reto diario.
+- `BOT_APIKEY`: Solo es necesario para nuestro caso que tenemos limitado nuestro endpoint para usuarios permitidos

README_EN.md

@@ -24,6 +24,7 @@ To build and deploy this project, you will need the following:
 ### Environment Variables
 
 - `ENDPOINT`: URL of the endpoint where the daily challenge data will be sent.
+- `BOT_APIKEY`: Only necessary for our case that we have limited our endpoint for allowed users.
 
 ### Local Testing
 
@@ -36,3 +37,4 @@ This project is configured to deploy automatically using GitHub Actions workflow
 - `CLOUDFLARE_ACCOUNT_ID`: Your Cloudflare account ID.
 - `CLOUDFLARE_API_TOKEN`: Your Cloudflare API token.
 - `ENDPOINT`: URL of the API to which the daily challenge data will be sent.
+- `BOT_APIKEY`: Only necessary for our case that we have limited our endpoint for allowed users.

src/cangrebot.rs

@@ -4,7 +4,13 @@ use worker::{console_debug, console_warn};
 
 use crate::challenge::DailyChallenge;
 
-pub async fn set_daily(endpoint: String, day: i64, challenge: DailyChallenge, client: &Client) {
+pub async fn set_daily(
+    endpoint: &str,
+    apikey: &str,
+    day: i64,
+    challenge: DailyChallenge,
+    client: &Client,
+) {
     let req = json!({
         "title": format!("Reto #{day} - {}", challenge.question.title),
         "message": challenge.to_string(),
@@ -14,6 +20,7 @@ pub async fn set_daily(endpoint: String, day: i64, challenge: DailyChallenge, cl
     let res = client
         .post(endpoint)
         .header("content-type", "application/json")
+        .header("Authorization", apikey)
         .body(serde_json::to_string(&req).unwrap())
         .send()
         .await

src/lib.rs

@@ -18,6 +18,10 @@ pub async fn main(_e: ScheduledEvent, env: Env, _ctx: ScheduleContext) {
     std::panic::set_hook(Box::new(|info: &std::panic::PanicInfo| {
         console_error!("{info}")
     }));
+    let bot_key = env
+        .secret("BOT_APIKEY")
+        .map(|e| e.to_string())
+        .expect("Bot APIKEY Secret not found");
 
     // calculate days
     // its used for enumerate daily challenges
@@ -53,5 +57,5 @@ pub async fn main(_e: ScheduledEvent, env: Env, _ctx: ScheduleContext) {
 
     console_debug!("Challenge response: {challenge:?}");
 
-    set_daily(endpoint, days, challenge, &client).await;
+    set_daily(&endpoint, &bot_key, days, challenge, &client).await;
 }