tom-microservice 3.8.0 → 3.9.1

package/README.md

@@ -466,7 +466,7 @@ See [cors](https://github.com/expressjs/cors#configuration-options) for more inf
 Type: `string` </br>
 Default: `undefined`
 
-When you provide it, all request to **tom** 🐶 needs to be authenticated using `x-api-key` header and the value provided.
+When you provide it, all request to **tom** 🐶 needs to be authenticated using `req.headers[`x-api-key`] or `req.query.apiKey` and the value provided.
 
 You can use [randomkeygen.com](https://randomkeygen.com) for that.
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "tom-microservice",
   "description": "Tom creates customers, subscriptions plans & send notifications.",
   "homepage": "https://tom.js.org",
-  "version": "3.8.0",
+  "version": "3.9.1",
   "main": "src",
   "bin": {
     "tom": "bin/index.js"

package/src/routes.js

@@ -1,6 +1,6 @@
 'use strict'
 
-const { get, eq, forEach, noop } = require('lodash')
+const { eq, forEach, noop } = require('lodash')
 const { buffer, text } = require('http-body')
 const requestIp = require('request-ip')
 const toQuery = require('to-query')()
@@ -78,7 +78,8 @@ const createRouter = () => {
   if (TOM_API_KEY) {
     router.use((req, res, next) => {
       if (UNAUTHENTICATED_PATHS.includes(req.path)) return next()
-      const apiKey = get(req, 'headers.x-api-key')
+      const apiKey = req.headers['x-api-key'] ?? req.query.apiKey
+
       return eq(apiKey, TOM_API_KEY)
         ? next()
         : send.fail(