1337d4332f
* Switch to SPDX license format for all non-codegen files
* Add test to ensure all committed JS files have SPDX header
(cherry picked from commit 461f9b7f66)
Co-authored-by: Josh Mock <joshua.mock@elastic.co>
71 lines
1.7 KiB
JavaScript
71 lines
1.7 KiB
JavaScript
/*
|
|
* Copyright Elasticsearch B.V. and contributors
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*/
|
|
|
|
// IMPORTANT: this is not a production ready code & purely for demonstration purposes,
|
|
// we make no guarantees on it's security and stability
|
|
|
|
// NOTE: to make this endpoint work, you should create an ApiKey with 'read' permissions
|
|
|
|
'use strict'
|
|
|
|
const { Client } = require('@elastic/elasticsearch')
|
|
const authorize = require('../utils/authorize')
|
|
|
|
const INDEX = '<index-name>'
|
|
const client = new Client({
|
|
cloud: {
|
|
id: process.env.ELASTIC_CLOUD_ID
|
|
}
|
|
})
|
|
|
|
module.exports = async (req, res) => {
|
|
const [err, token] = authorize(req)
|
|
if (err) {
|
|
res.status(401)
|
|
res.json(err)
|
|
return
|
|
}
|
|
|
|
if (typeof req.body.text !== 'string') {
|
|
res.status(400)
|
|
res.json({
|
|
error: 'Bad Request',
|
|
message: 'Missing parameter "body.text"',
|
|
statusCode: 400
|
|
})
|
|
return
|
|
}
|
|
|
|
try {
|
|
const response = await client.search({
|
|
index: INDEX,
|
|
// You could directly send from the browser
|
|
// the Elasticsearch's query DSL, but it will
|
|
// expose you to the risk that a malicious user
|
|
// could overload your cluster by crafting
|
|
// expensive queries.
|
|
query: {
|
|
match: { field: req.body.text }
|
|
}
|
|
}, {
|
|
headers: {
|
|
Authorization: `ApiKey ${token}`
|
|
}
|
|
})
|
|
|
|
// It might be useful to configure http control caching headers
|
|
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
|
|
// res.setHeader('stale-while-revalidate', '30')
|
|
res.json(response)
|
|
} catch (err) {
|
|
res.status(err.statusCode || 500)
|
|
res.json({
|
|
error: err.name,
|
|
message: err.message,
|
|
statusCode: err.statusCode || 500
|
|
})
|
|
}
|
|
}
|