sendou.ink/app/features/api-public/api-public-utils.server.ts

import type { ApiTokenType } from "~/db/tables";
import * as ApiRepository from "~/features/api/ApiRepository.server";

async function loadApiTokensCache() {
	const dbTokens = await ApiRepository.allApiTokens();

	const tokenMap = new Map<string, ApiTokenType>();

	for (const { token, type } of dbTokens) {
		tokenMap.set(token, type);
	}

	return tokenMap;
}

let apiTokens = await loadApiTokensCache();

export async function refreshApiTokensCache() {
	apiTokens = await loadApiTokensCache();
}

function extractToken(req: Request) {
	const authHeader = req.headers.get("Authorization");
	if (!authHeader) {
		throw new Response("Missing Authorization header", { status: 401 });
	}
	return authHeader.replace("Bearer ", "");
}

export function requireBearerAuth(req: Request) {
	const token = extractToken(req);
	if (!apiTokens.has(token)) {
		throw new Response("Invalid token", { status: 401 });
	}
}