Serverless Workers Overview

import { authenticateRequest, initClient, settings } from '@wacht/backend';

type Env = {
  WACHT_API_KEY: string;
  WACHT_PUBLISHABLE_KEY: string;
  WACHT_BACKEND_API_URL?: string;
};

export async function handle(request: Request, env: Env): Promise<Response> {
  initClient({
    apiKey: env.WACHT_API_KEY,
    baseUrl: env.WACHT_BACKEND_API_URL,
  });

  const { auth } = await authenticateRequest(request, {
    publishableKey: env.WACHT_PUBLISHABLE_KEY,
  });
  await auth.protect({ permission: 'deployment:read' });

  const deployment = await settings.getDeploymentSettings();
  return new Response(JSON.stringify(deployment), {
    headers: { 'content-type': 'application/json' },
  });
}

import { gateway, settings } from '@wacht/backend';

export async function handleMachine(request: Request, env: Env): Promise<Response> {
  const incoming = request.headers.get('x-api-key') || '';

  const decision = await gateway.checkPrincipalAuthz(
    {
      principalType: 'api_key',
      principalValue: incoming,
      resource: '/machine/deployment',
      method: 'GET',
      requiredPermissions: ['deployment:read'],
    },
  );

  if (!decision.allowed) {
    return new Response(JSON.stringify({ error: 'forbidden' }), { status: 403 });
  }

  const deployment = await settings.getDeploymentSettings();
  return new Response(JSON.stringify(deployment), {
    headers: { 'content-type': 'application/json' },
  });
}