fix: use api key in all requests (ONCALL-7076) (#136)

* use api key in all requests

* prevent leaking request details

* fix

* fix

Author: lukaszczerpak-cloudinary

routes/wpt.js

@@ -37,7 +37,7 @@ const routeCallback = (error, result, res, rollBarMsg) => {
     if (error.statusCode) {
       res.status(error.statusCode).send();
     } else {
-      res.json(error);
+      res.json({status: error.status, message: error.message});
     }
   } else {
     res.json(result);

wtp/apiCaller.js

@@ -23,7 +23,7 @@ const getTestResults = async (testId, quality, cb) => {
     method: "GET",
     url: RESULTS_URL,
     searchParams: {test: testId},
-    headers: { 'User-Agent': 'WebSpeedTest' }
+    headers: { 'User-Agent': 'WebSpeedTest', 'X-WPT-API-KEY': apiKeys.getRandom() }
   };
   let response;
   let rollBarMsg = {};
@@ -117,7 +117,7 @@ const checkTestStatus = async (testId, quality, cb) => {
     method: "GET",
     url: GET_TEST_STATUS,
     searchParams: {test: testId, f: "json"},
-    'headers': { 'User-Agent': 'WebSpeedTest' }
+    'headers': { 'User-Agent': 'WebSpeedTest', 'X-WPT-API-KEY': apiKeys.getRandom() }
   };
   let response;
   let rollBarMsg = {};