Validate country code header (#242)

* Validate country code header * method * recurrign
guardian · Dec 17, 2024 · 3ef53dd · 3ef53dd
1 parent 4d99162
commit 3ef53dd
Show file tree

Hide file tree

Showing 2 changed files with 85 additions and 7 deletions.
diff --git a/cdk/lib/__snapshots__/support-reminders.test.ts.snap b/cdk/lib/__snapshots__/support-reminders.test.ts.snap
diff --git a/cdk/lib/support-reminders.ts b/cdk/lib/support-reminders.ts
@@ -6,7 +6,7 @@ import {GuVpc} from "@guardian/cdk/lib/constructs/ec2";
 import {GuLambdaFunction} from "@guardian/cdk/lib/constructs/lambda";
 import type {App} from "aws-cdk-lib";
 import {Duration} from "aws-cdk-lib";
-import { AwsIntegration, CfnBasePathMapping, CfnDomainName, Cors  } from "aws-cdk-lib/aws-apigateway";
+import {AwsIntegration, CfnBasePathMapping, CfnDomainName, Cors, RequestValidator} from "aws-cdk-lib/aws-apigateway";
 import {ComparisonOperator, Metric} from "aws-cdk-lib/aws-cloudwatch";
 import {SecurityGroup} from "aws-cdk-lib/aws-ec2";
 import {Schedule} from "aws-cdk-lib/aws-events";
@@ -174,14 +174,28 @@ export class SupportReminders extends GuStack {
 				{
 					statusCode: '200',
 				},
-			]
+			],
+			requestParameters: {
+				'method.request.header.X-GU-GeoIP-Country-Code': true,
+			},
+			requestValidator: new RequestValidator(this, 'one-off-validator', {
+				restApi: supportRemindersApi.api,
+				validateRequestParameters: true
+			}),
 		});
 		supportRemindersApi.api.root.resourceForPath('/create/recurring').addMethod('POST', sendMessageIntegration, {
 			methodResponses: [
 				{
 					statusCode: '200',
 				},
-			]
+			],
+			requestParameters: {
+				'method.request.header.X-GU-GeoIP-Country-Code': true,
+			},
+			requestValidator: new RequestValidator(this, 'recurring-validator', {
+				restApi: supportRemindersApi.api,
+				validateRequestParameters: true
+			}),
 		});