Add basic auth to sessions route

Author: cweems

.env.example

@@ -5,4 +5,6 @@ CALL_ANNOUCEMENT_VOICE=
 CALL_ANNOUCEMENT_LANGUAGE=
 OUT_OF_SESSION_MESSAGE_FOR_CALL=
 CONNECTING_CALL_ANNOUCEMENT=
-DOMAIN=
+DOMAIN=
+AUTH_USERNAME=
+AUTH_PASSWORD=

README.md

@@ -24,6 +24,9 @@ This application supports masking communicaitons between SMS, WhatsApp, and voic
 7. Start your npm server
 > npm start
 
+# Authorization
+This app protects API calls to /sessions with basic auth. You can set your basic auth username and password in the .env file.
+
 # Using
 This application provides an endpoint to create a conversation for participants to communicate and a landing page to simplify getting started.
 

package.json

@@ -5,6 +5,7 @@
     "cors": "^2.8.5",
     "dotenv": "^16.0.1",
     "express": "^4.18.1",
+    "express-basic-auth": "^1.2.1",
     "http-errors": "^2.0.0",
     "morgan": "^1.10.0",
     "twilio": "^3.78.0"

src/routes/index.ts

@@ -1,13 +1,18 @@
 import { Router } from "express";
 import * as controllers from "../controllers";
+import basicAuth from 'express-basic-auth'
+
+const { AUTH_USERNAME, AUTH_PASSWORD } = process.env
 
 const router = Router();
 
 router.post("/conversations-post-event", controllers.conversationsPostEvent.post);
 
 router.post("/inbound-call", controllers.inboundCall.post);
-router.get("/join-conference", controllers.joinConference.get)
+router.post("/join-conference", controllers.joinConference.get)
 
-router.post("/sessions", controllers.session.post);
+router.post("/sessions", basicAuth({
+  users: { [AUTH_USERNAME]:AUTH_PASSWORD}
+}), controllers.session.post);
 
 export default router;