Adding a preshared key verification middleware

server/.env.example

@@ -1,3 +1,5 @@
+PRESHARED_GATEWAY_KEY=SECRET_STUFF
+
 PORT=3000
 DB_USERNAME=example_name
 DB_PASSWORD=example_password

server/src/app.js

@@ -3,6 +3,7 @@ import express from 'express';
 import { ApolloServer } from 'apollo-server-express';
 import * as Sentry from '@sentry/node';
 import schema from './schema';
+import wrongPreshared from './errors/notAllowed.json';
 
 const app = express();
 
@@ -10,6 +11,14 @@ const app = express();
 Sentry.init({ dsn: process.env.SENTRY_DNS });
 app.use(Sentry.Handlers.requestHandler());
 
+app.post('/graphql', (req, res, next) => {
+  if (req.headers.preshared === process.env.PRESHARED_GATEWAY_KEY) {
+    next();
+  } else {
+    res.send(wrongPreshared);
+  }
+});
+
 
 // Starting the graphql server
 const server = new ApolloServer({

server/src/errors/notAllowed.json

@@ -0,0 +1,8 @@
+{
+  "errors": [
+    {
+      "code": 401,
+      "message": "Wait, you're not supposed to be here, go through the gate as everyone else"
+    }
+  ]
+}