Do not allow API KEY to be the same as MASTER_KEY

refs SkygearIO#373
cheungpat · Jun 5, 2017 · d9320ad · d9320ad
1 parent c8d9646
commit d9320ad
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/server/skyconfig/config.go b/pkg/server/skyconfig/config.go
@@ -191,6 +191,9 @@ func (config *Configuration) Validate() error {
 	if config.App.MasterKey == "" {
 		return errors.New("MASTER_KEY is not set")
 	}
+	if config.App.APIKey == config.App.MasterKey {
+		return errors.New("MASTER_KEY cannot be the same as API_KEY")
+	}
 	if !regexp.MustCompile("^[A-Za-z0-9_]+$").MatchString(config.App.Name) {
 		return fmt.Errorf("APP_NAME '%s' contains invalid characters other than alphanumerics or underscores", config.App.Name)
 	}