Merge pull request #543 from AikidoSec/env-vars

Support AIKIDO_ENDPOINT and AIKIDO_REALTIME_ENDPOINT

Author: hansott

end2end/tests/express-mongodb.ssrf.test.js

@@ -57,7 +57,7 @@ t.test("it blocks in blocking mode", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 
@@ -155,7 +155,7 @@ t.test("it does not block in dry mode", (t) => {
       ...process.env,
       AIKIDO_DEBUG: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 
@@ -213,7 +213,7 @@ t.test("it blocks request to base URL if proxy is not trusted", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
       AIKIDO_TRUST_PROXY: "false",
     },
   });

end2end/tests/hono-xml-allowlists.test.ts

@@ -59,7 +59,7 @@ t.test("it blocks non-allowed IP addresses", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCK: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 

end2end/tests/hono-xml-blocklists.test.js

@@ -58,7 +58,7 @@ t.test("it blocks geo restricted IPs", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 
@@ -158,7 +158,7 @@ t.test("it blocks bots", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 
@@ -252,7 +252,7 @@ t.test("it does not block bypass IP if in blocklist", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 

end2end/tests/hono-xml-rate-limiting.test.js

@@ -49,7 +49,7 @@ t.test("it rate limits requests", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 
@@ -109,7 +109,7 @@ t.test("user rate limiting works", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
     },
   });
 

end2end/tests/nestjs-fastify-rate-limiting.test.js

@@ -60,7 +60,7 @@ t.test("it rate limits requests", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
       PORT: "4002",
     },
   });
@@ -122,7 +122,7 @@ t.test("user rate limiting works", (t) => {
       AIKIDO_DEBUG: "true",
       AIKIDO_BLOCKING: "true",
       AIKIDO_TOKEN: token,
-      AIKIDO_URL: testServerUrl,
+      AIKIDO_ENDPOINT: testServerUrl,
       PORT: "4003",
     },
   });

library/agent/getAPIURL.ts

@@ -1,6 +1,6 @@
 export function getAPIURL() {
-  if (process.env.AIKIDO_URL) {
-    return new URL(process.env.AIKIDO_URL);
+  if (process.env.AIKIDO_ENDPOINT) {
+    return new URL(process.env.AIKIDO_ENDPOINT);
   }
 
   return new URL("https://guard.aikido.dev");

library/agent/realtime/getRealtimeURL.ts

@@ -1,6 +1,6 @@
 export function getRealtimeURL() {
-  if (process.env.AIKIDO_REALTIME_URL) {
-    return new URL(process.env.AIKIDO_REALTIME_URL);
+  if (process.env.AIKIDO_REALTIME_ENDPOINT) {
+    return new URL(process.env.AIKIDO_REALTIME_ENDPOINT);
   }
 
   return new URL("https://runtime.aikido.dev");