support external browser chrome extension distinct secret key

Author: pH-7

.env.dist

@@ -1,6 +1,7 @@
 ## API
 APP_PORT=3004
 JWT_SECRET=""
+BROWSER_EXTENSION_SECRET=""
 JWT_TOKEN_EXPIRY_TIME="3h"
 
 ## Mistral AI

src/config/index.ts

@@ -7,6 +7,7 @@ interface ConfigProps {
   // App Server
   port: string | number;
   jwtToken: string;
+  browserExtensionSecret: string;
   jwtTokenExpiryTime: string;
 
   // Mistral AI
@@ -28,6 +29,7 @@ interface ConfigProps {
 const config: ConfigProps = {
   port: process.env.APP_PORT || 3000,
   jwtToken: process.env.JWT_SECRET || 'jwt-secret',
+  browserExtensionSecret: process.env.BROWSER_EXTENSION_SECRET || 'browser-secret',
   jwtTokenExpiryTime: process.env.JWT_TOKEN_EXPIRY_TIME || '1h',
 
   mistralAiApiEnabled: !!process.env.MISTRAL_AI_API_ENABLED,

src/middlewares/authMiddleware.ts

@@ -30,7 +30,7 @@ export const authMiddleware = (req: Request, res: Response, next: NextFunction)
   }
 
   try {
-    if (sid !== config.jwtToken) {
+    if ([config.jwtToken, config.browserExtensionSecret].includes(sid)) {
       throw new Error('Invalid token');
     }