Merge pull request #18 from NHSDigital/NPA-1970-authenticate-with-waf-using-api-key

Added secret for WAF API token

Author: chris-young-12-nhs

manifest_template.yml

@@ -1,6 +1,6 @@
 SERVICE_NAME: validated-relationships-service-api
 PRODUCT_DISPLAY_NAME: validated-relationships-service-api
-DESCRIPTION: example description
+DESCRIPTION: Validated Relationships Service API
 APIGEE_ENVIRONMENTS:
   - name: internal-dev
     display_name: Internal Development

proxies/live/apiproxy/policies/AssignMessage.AddAPIToken.xml

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<AssignMessage async="false" continueOnError="false" enabled="true" name="AddAPIToken">
+    <DisplayName>Add API Token</DisplayName>
+    <Add>
+        <Headers>
+            <Header name="x-origin-shared-secret">{private.environment_kvm_data.apikey}</Header>
+        </Headers>
+    </Add>
+    <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
+    <AssignTo createNew="false" transport="http" type="request"/>
+</AssignMessage>

proxies/live/apiproxy/targets/target.xml

@@ -7,6 +7,9 @@
       <Step>
         <Name>FlowCallout.ApplyRateLimiting</Name>
       </Step>
+      <Step>
+        <Name>AddAPIToken</Name>
+      </Step>
     </Request>
   </PreFlow>
   <FaultRules>
@@ -24,7 +27,7 @@
       <!--TODO: The target needs to configured on a per enironment basis (NPA-1979)
           This URL will also need to change once we have DNS in place (NPA-1669)
       -->
-      <URL>https://6e6ljoc1a5.execute-api.eu-west-2.amazonaws.com/default/api</URL>
+      <URL>https://jfhedvdn0k.execute-api.eu-west-2.amazonaws.com/default/api</URL>
       <Properties>
           <Property name="supports.http10">true</Property>
           <Property name="request.retain.headers">User-Agent,Referer,Accept-Language</Property>