fix DB_CA_SSL certificate usage

Paidify · Jun 7, 2024 · 723424c · 723424c
1 parent 38eaaa4
commit 723424c
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 3 deletions.
diff --git a/src/config/index.config.js b/src/config/index.config.js
@@ -13,7 +13,7 @@ export const API_GATEWAY_URL = process.env.API_GATEWAY_URL || 'http://localhost:
 // db
 export const DB_HOST = process.env.DB_HOST || 'localhost';
 export const DB_PORT = process.env.DB_PORT || 3306;
-export const DB_SSL_CA = NODE_ENV === 'production' ? Buffer.from(process.env.DB_SSL_CA, 'base64').toString('ascii') : undefined;
+export const DB_SSL_CA = NODE_ENV === 'production' && process.env.DB_SSL_CA ? Buffer.from(process.env.DB_SSL_CA, 'base64').toString('ascii') : undefined;
 export const DB_USER = process.env.DB_USER || 'api';
 export const DB_PASSWORD = process.env.DB_PASSWORD || 'secret';
 export const DB_PAIDIFY_SCHEMA = process.env.DB_PAIDIFY_SCHEMA || 'paidify';

diff --git a/src/gateway/payment.js b/src/gateway/payment.js
@@ -32,6 +32,7 @@ router.post('/', async (req, res) => {
         try {
             token = jwt.verify(auth.split(' ')[1], JWT_SECRET);
         } catch (err) {}
+        if(!token) return res.status(401).json({ message: 'Invalid token' });
         if (token.role !== ROLE_DEFAULT) {
             return res.status(401).json({ message: 'You are not authorized to perform this action' });
         }

diff --git a/src/services/dbPaidify.js b/src/services/dbPaidify.js
@@ -12,7 +12,7 @@ import {
 const pool = createPool({
     port: DB_PORT,
     host: DB_HOST,
-    ssl: NODE_ENV === 'production' ? { ca: DB_SSL_CA } : undefined,
+    ssl: NODE_ENV === 'production' && DB_SSL_CA ? { ca: DB_SSL_CA } : undefined,
     user: DB_USER,
     password: DB_PASSWORD,
     database: DB_PAIDIFY_SCHEMA,

diff --git a/src/services/dbUniv.js b/src/services/dbUniv.js
@@ -12,7 +12,7 @@ import {
 const pool = createPool({
     port: DB_PORT,
     host: DB_HOST,
-    ssl: NODE_ENV === 'production' ? { ca: DB_SSL_CA } : undefined,
+    ssl: NODE_ENV === 'production' && DB_SSL_CA ? { ca: DB_SSL_CA } : undefined,
     user: DB_USER,
     password: DB_PASSWORD,
     database: DB_UNIV_SCHEMA,