From 3b493997db1901eb957fa60450e662f252f0a457 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sun, 27 Sep 2026 02:20:35 +0000
Subject: [PATCH] fix: add authentication check in main.rs

The fetch handler in src/main
Addresses CWE-287
---
 src/main.rs | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/main.rs b/src/main.rs
index 01c5144..85171a7 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -70,6 +70,14 @@ async fn fetch(request: Request, env: Env, _ctx: Context) -> worker::Result<Resp
     match request.path().as_str() {
         "/health" => Response::ok(r#"{"ready":true}"#).map(json),
         "/" if request.method() == worker::Method::Get => {
+            let expected = env.secret("STATUS_TOKEN")?.to_string();
+            let provided = request
+                .headers()
+                .get("Authorization")?
+                .and_then(|header| header.strip_prefix("Bearer ").map(str::to_string));
+            if provided.as_deref() != Some(expected.as_str()) {
+                return Response::error("Unauthorized", 401);
+            }
             let rpc: JsValue = world(&env)?.into();
             let status = method(&rpc, "status", &[])?;
             let status =