Add admin API

src/api/admin.ts

@@ -0,0 +1,24 @@
+/*
+ * server component for the TimeLimit App
+ * Copyright (C) 2019 Jonas Lochmann
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, version 3 of the License.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+ import { Router } from 'express'
+
+export const createAdminRouter = () => {
+  const router = Router()
+
+  return router
+}

src/api/index.ts

@@ -24,6 +24,10 @@ import { createChildRouter } from './child'
 import { createParentRouter } from './parent'
 import { createPurchaseRouter } from './purchase'
 import { createSyncRouter } from './sync'
+import { createAdminRouter } from './admin'
+import * as basicAuth from 'basic-auth'
+
+const adminToken = process.env.ADMIN_TOKEN || ''
 
 export const createApi = ({ database, websocket, connectedDevicesManager }: {
   database: Database
@@ -46,5 +50,22 @@ export const createApi = ({ database, websocket, connectedDevicesManager }: {
   app.use('/purchase', createPurchaseRouter({ database, websocket }))
   app.use('/sync', createSyncRouter({ database, websocket, connectedDevicesManager }))
 
+  if (adminToken !== '') {
+    app.use(
+      '/admin',
+      (req, res, next) => {
+        const user = basicAuth(req)
+
+        if (user && user.pass === adminToken) {
+          next()
+        } else {
+          res.setHeader('WWW-Authenticate', 'Basic realm="login"')
+          res.sendStatus(401)
+        }
+      },
+      createAdminRouter()
+    )
+  }
+
   return app
 }