ShiftSync/api/middleware/auth.js

export const validateMedicationApiKey = (req, res, next) => {
    console.log('req: ', req);
    console.log('req.headers: ', req.headers);
  const authHeader = req.headers['authorization'];
  console.log('authHeader: ', authHeader);
  const token = authHeader && authHeader.split(' ')[1];
  console.log('token: ', token);
  
  if (!token || token !== process.env.MEDICATION_API_KEY) {
    console.log('into the token not ok');
    return res.status(401).json({ error: 'Unauthorized - Invalid API Key' });
  }
  console.log('off to next');
  next();
};

export const validateShiftSyncApiKey = (req, res, next) => {
  const authHeader = req.headers['authorization'];
  const token = authHeader && authHeader.split(' ')[1];
  
  if (!token || token !== process.env.SHIFTSYNC_API_KEY) {
    return res.status(401).json({ error: 'Unauthorized - Invalid API Key' });
  }
  
  next();
};