Katie Smith a8d3b0952f Add MMG_INBOUND_SMS_AUTH config variable and auth check ...

Checks authentication header value on inbound SMS requests from
MMG  against a list of allowed API keys set in the application
config.

At the moment, we're only logging the attempts without aborting the
requests. Once this is rolled out to production and we've checked
the logs we'll switch on the aborts and add the tests for 401 and 403
responses.

This work has already been done for Firetext in a previous PR:
https://github.com/alphagov/notifications-api/pull/1409

2017-12-14 13:37:50 +00:00

3.8 KiB

Raw Blame History

View Raw