Remove -s (silent) from curl so CI logs show the HTTP response on failure. Add logger.error in requireCronSecret so 401s from bad/missing secrets appear in Sentry. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
10 lines
417 B
TypeScript
10 lines
417 B
TypeScript
import { logger } from "~/lib/logger";
|
|
|
|
export function requireCronSecret(request: Request): void {
|
|
const secret = process.env.CRON_SECRET;
|
|
if (!secret) throw new Response("CRON_SECRET not configured", { status: 500 });
|
|
if (request.headers.get("x-cron-secret") !== secret) {
|
|
logger.error("[cron-auth] Invalid or missing X-Cron-Secret header");
|
|
throw new Response("Unauthorized", { status: 401 });
|
|
}
|
|
}
|