diff --git a/server/constants/constants.go b/server/constants/constants.go index 125a2a9..107efef 100644 --- a/server/constants/constants.go +++ b/server/constants/constants.go @@ -1,7 +1,7 @@ package constants var ( - ROOT_SECRET = "" + ADMIN_SECRET = "" ENV = "" VERSION = "" DATABASE_TYPE = "" diff --git a/server/env.go b/server/env.go index ee7a7f3..94fb1cf 100644 --- a/server/env.go +++ b/server/env.go @@ -41,7 +41,7 @@ func InitEnv() { constants.VERSION = Version - constants.ROOT_SECRET = os.Getenv("ROOT_SECRET") + constants.ADMIN_SECRET = os.Getenv("ADMIN_SECRET") constants.ENV = os.Getenv("ENV") constants.DATABASE_TYPE = os.Getenv("DATABASE_TYPE") constants.DATABASE_URL = os.Getenv("DATABASE_URL") @@ -69,7 +69,7 @@ func InitEnv() { constants.DISABLE_BASIC_AUTHENTICATION = os.Getenv("DISABLE_BASIC_AUTHENTICATION") constants.DISABLE_EMAIL_VERICATION = os.Getenv("DISABLE_EMAIL_VERICATION") - if constants.ROOT_SECRET == "" { + if constants.ADMIN_SECRET == "" { panic("root admin secret is required") } diff --git a/server/utils/validateSuperAdmin.go b/server/utils/validateSuperAdmin.go index 4d4866c..c19d62b 100644 --- a/server/utils/validateSuperAdmin.go +++ b/server/utils/validateSuperAdmin.go @@ -6,10 +6,10 @@ import ( ) func IsSuperAdmin(gc *gin.Context) bool { - secret := gc.Request.Header.Get("x-authorizer-root-secret") + secret := gc.Request.Header.Get("x-authorizer-admin-secret") if secret == "" { return false } - return secret == constants.ROOT_SECRET + return secret == constants.ADMIN_SECRET }