INNER CODE UNIT · JavaScript

requireToken

aeonfun/opendia · opendia-mcp/server.js:231

function requireToken(req, res, next) {
  if (!AUTH_TOKEN) return next();

  const header = req.headers.authorization || '';
  const provided = header.startsWith('Bearer ') ? header.slice(7) : null;
  if (!provided || !timingSafeEqual(provided, AUTH_TOKEN)) {
    console.error(`🚫 Rejected ${req.method} ${req.path} — missing or bad token`);
    return res.status(401).json({ error: 'Unauthorized' });
  }
  return next();
}

app.use(guardOrigin);
app.use(express.json());

// WebSocket server for Chrome/Firefox Extension (will be initialized after port conflict resolution)
let wss = null;
let chromeExtensionSocket = null;

View source record →