From c970f20bc5ba9a31035275d5c414338533724f9b Mon Sep 17 00:00:00 2001
From: Paul Makles <me@insrt.uk>
Date: Tue, 12 Dec 2023 21:05:02 +0100
Subject: [PATCH] feat: multiple tokens

---
 index.mjs         | 7 ++++++-
 package-lock.json | 2 +-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/index.mjs b/index.mjs
index e42a9f9..8a23cfd 100644
--- a/index.mjs
+++ b/index.mjs
@@ -46,8 +46,13 @@ app.get("/jwt", async (req, res) => {
   }
 });
 
+if (typeof process.env.SERVER_TOKEN !== "string")
+  throw "Must specify server tokens";
+
+const tokens = process.env.SERVER_TOKEN.split(",");
+
 app.post("/info", async (req, res) => {
-  if (req.headers["x-server"] !== process.env.SERVER_TOKEN) {
+  if (!tokens.includes(req.headers["x-server"])) {
     return res.status(403).send("Not server.");
   }
 
diff --git a/package-lock.json b/package-lock.json
index f3ae410..bb5b12f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,5 +1,5 @@
 {
-  "name": "mini-auth-server",
+  "name": "social-login-api",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {