All files / api-keys list.js

100% Statements 16/16
100% Branches 8/8
100% Functions 2/2
100% Lines 15/15

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85                1x 1x   1x 1x   1x   1x 6x   6x   6x 1x                     5x                       4x                       4x                       1x   1x                          
/**
 * List API Keys Lambda
 * GET /v1/admin/api-keys
 *
 * Lists all API keys created by the authenticated user
 * Requires JWT authentication
 */
 
const { DynamoDBClient } = require('@aws-sdk/client-dynamodb')
const { DynamoDBDocumentClient, QueryCommand } = require('@aws-sdk/lib-dynamodb')
 
const client = new DynamoDBClient({})
const docClient = DynamoDBDocumentClient.from(client)
 
const API_KEYS_TABLE = process.env.API_KEYS_TABLE
 
exports.handler = async (event) => {
  try {
    // Only JWT authentication allowed for admin operations
    const userId = event.requestContext?.authorizer?.claims?.sub
 
    if (!userId) {
      return {
        statusCode: 401,
        headers: {
          'Content-Type': 'application/json',
          'Access-Control-Allow-Origin': '*'
        },
        body: JSON.stringify({ error: 'Authentication required' })
      }
    }
 
    // Query API keys by createdBy GSI
    const result = await docClient.send(
      new QueryCommand({
        TableName: API_KEYS_TABLE,
        IndexName: 'createdByIndex',
        KeyConditionExpression: 'createdBy = :userId',
        ExpressionAttributeValues: {
          ':userId': userId
        }
      })
    )
 
    // Format response (exclude keyHash for security)
    const apiKeys = result.Items.map((item) => ({
      id: item.id,
      name: item.name,
      description: item.description || '',
      permissions: item.permissions,
      allowedEntityIds: item.allowedEntityIds,
      status: item.status,
      createdAt: item.createdAt,
      expiresAt: item.expiresAt || null,
      lastUsedAt: item.lastUsedAt || null
    }))
 
    return {
      statusCode: 200,
      headers: {
        'Content-Type': 'application/json',
        'Access-Control-Allow-Origin': '*'
      },
      body: JSON.stringify({
        apiKeys,
        count: apiKeys.length
      })
    }
  } catch (error) {
    console.error('Error listing API keys:', error)
 
    return {
      statusCode: 500,
      headers: {
        'Content-Type': 'application/json',
        'Access-Control-Allow-Origin': '*'
      },
      body: JSON.stringify({
        error: 'Failed to list API keys',
        message: error.message
      })
    }
  }
}