From 5acc1d4999c281bd7571de74d29a1b23ccf9c4be Mon Sep 17 00:00:00 2001
From: Alexis <35.alexis.pele@gmail.com>
Date: Tue, 16 Jun 2020 21:21:12 +0200
Subject: [PATCH] - don't have time for more security measures lmao

---
 client/src/components/spells/spells-list.vue |  1 -
 index.js                                     | 35 ++++++++++++++------
 2 files changed, 24 insertions(+), 12 deletions(-)

diff --git a/client/src/components/spells/spells-list.vue b/client/src/components/spells/spells-list.vue
index 0f1079f..74e0522 100644
--- a/client/src/components/spells/spells-list.vue
+++ b/client/src/components/spells/spells-list.vue
@@ -51,7 +51,6 @@ export default {
                 return data
             } else {
                 const { data } = await Schools.getSpellsFromSchool(this.school_id)
-                console.log(data.spells)
                 return data.spells
             }
         },
diff --git a/index.js b/index.js
index 17f265e..edd4462 100644
--- a/index.js
+++ b/index.js
@@ -28,20 +28,33 @@ app.use(helmet())
 // Serves
 const server = app.listen( port, () => {console.log(`App listening on port ${port}`)})
 
-// Auth
-app.all('*', (req, res, next) => {
-    if (req.headers.auracle_key !== process.env.API_KEY) {
-        return res.status(401).send('The API is either missing or incorrect.')
+// Get credentials
+// app.get('/api/login', (req, res, next) => {
+//     if (req.headers.auracle_key !== process.env.API_KEY_PUBLIC) {
+//         return res.status(401).send('Credentials error !')
+//     } else {
+//         return res.status(200).send(JSON.stringify(
+//             {
+//                 "secret_key": process.env.API_KEY_PRIVATE,
+//             })
+//         )
+//     }
+// })
+
+// Auth guard
+const authguard = (req, res, next) => {
+    if (req.headers.auracle_key !== process.env.API_KEY_PUBLIC) {
+        return res.status(401).send('The API key is either missing or incorrect.')
     } else {
         next()
     }
-})
+}
 
 // Routing
-app.use('/api/spells', routes.spells)
-app.use('/api/schools', routes.schools)
-app.use('/api/meta_schools', routes.meta_schools)
-app.use('/api/variables', routes.variables)
-app.use('/api/ingredients', routes.ingredients)
-app.use('/api/users', routes.users)
+app.use('/api/spells', authguard,routes.spells)
+app.use('/api/schools', authguard, routes.schools)
+app.use('/api/meta_schools', authguard, routes.meta_schools)
+app.use('/api/variables', authguard, routes.variables)
+app.use('/api/ingredients', authguard, routes.ingredients)
+app.use('/api/users', authguard, routes.users)