23 lines
706 B
TypeScript
23 lines
706 B
TypeScript
|
import { NextRequest, NextResponse } from 'next/server';
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Validate the OpenClaw API key from the request header.
|
||
|
|
* Returns a 401 NextResponse if invalid, or null if valid.
|
||
|
|
*/
|
||
|
|
export function validateOpenClawKey(request: NextRequest): NextResponse | null {
|
||
|
|
const expectedKey = process.env.OPENCLAW_API_KEY;
|
||
|
|
|
||
|
|
if (!expectedKey) {
|
||
|
|
console.error('[OpenClaw] OPENCLAW_API_KEY is not set');
|
||
|
|
return NextResponse.json({ error: 'OpenClaw API not configured' }, { status: 500 });
|
||
|
|
}
|
||
|
|
|
||
|
|
const providedKey = request.headers.get('x-openclaw-key');
|
||
|
|
|
||
|
|
if (!providedKey || providedKey !== expectedKey) {
|
||
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
||
|
|
}
|
||
|
|
|
||
|
|
return null;
|
||
|
|
}
|