Proxy Authentication

// Create this endpoint on YOUR backend server
// This is YOUR custom endpoint, not a DataBrain API
app.get('/api/databrain/guest-token', async (req, res) => {
  try {
    // Verify the request is from DataBrain using the auth key
    const authHeader = req.headers.authorization;
    if (!authHeader || authHeader !== `Bearer ${process.env.DATABRAIN_PROXY_KEY}`) {
      return res.status(401).json({
        error: {
          code: 'UNAUTHORIZED',
          message: 'Invalid authentication key'
        }
      });
    }

    // Add your own authorization logic here
    // For example, check user session, permissions, etc.
    const userSession = req.session?.user;
    if (!userSession) {
      return res.status(401).json({
        error: {
          code: 'UNAUTHORIZED',
          message: 'User not authenticated'
        }
      });
    }

    // Generate guest token using DataBrain API
    // Note: You can also return an existing/cached guest token instead of generating a new one each time
    const response = await fetch('https://api.usedatabrain.com/api/v2/guest-token/create', {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${process.env.DATABRAIN_API_KEY}`,
        'Content-Type': 'application/json'
      },
      body: JSON.stringify({
        clientId: userSession.id,
        dataAppName: 'your-data-app-name',
        // Add any additional parameters like filters, permissions, etc.
      })
    });

    const data = await response.json();

    if (data.error) {
      return res.status(400).json({ error: data.error });
    }

    // Return the guest token
    res.json({ token: data.token });
  } catch (error) {
    console.error('Error generating guest token:', error);
    res.status(500).json({
      error: {
        code: 'INTERNAL_ERROR',
        message: 'Failed to generate guest token'
      }
    });
  }
});