Netlify Functions Overview

import { authenticateRequest, initClient, users } from '@wacht/backend';

export default async (request: Request, context: { env: Record<string, string> }) => {
  initClient({
    apiKey: context.env.WACHT_API_KEY,
    baseUrl: context.env.WACHT_BACKEND_API_URL,
  });

  const { auth } = await authenticateRequest(request, {
    publishableKey: context.env.WACHT_PUBLISHABLE_KEY,
  });
  await auth.protect({ permission: 'user:read' });

  const page = await users.listUsers({ limit: 20 });
  return new Response(JSON.stringify(page), {
    headers: { 'content-type': 'application/json' },
  });
};

import { gateway, users } from '@wacht/backend';

export async function machineUsers(request: Request, context: { env: Record<string, string> }) {
  const apiKey = request.headers.get('x-api-key') || '';

  const decision = await gateway.checkPrincipalAuthz(
    {
      principalType: 'api_key',
      principalValue: apiKey,
      resource: '/machine/users',
      method: 'GET',
      requiredPermissions: ['user:read'],
    },
  );

  if (!decision.allowed) {
    return new Response(JSON.stringify({ error: 'forbidden' }), {
      status: 403,
      headers: { 'content-type': 'application/json' },
    });
  }

  return new Response(JSON.stringify(await users.listUsers({ limit: 20 })), {
    headers: { 'content-type': 'application/json' },
  });
}