Always require API key

Author: amiedes

lib/api/middlewares/authorization.js

@@ -12,6 +12,10 @@ module.exports = function authorization (metadataBackend, forceToBeMaster = fals
             req.profiler.done('authorization');
 
             return next(new Error('permission denied'));
+        } else if (!credentials.apiKeyToken) {
+            req.profiler.done('authorization');
+
+            return next(new Error('unauthorized'));
         }
 
         res.locals.api_key = credentials.apiKeyToken;

lib/services/error-handler.js

@@ -32,6 +32,8 @@ class ErrorHandler extends Error {
     getHttpStatus (httpStatus = 400) {
         if (this.message.includes('permission denied')) {
             return 403;
+        } else if (this.message.includes('unauthorized')) {
+            return 401;
         }
 
         return httpStatus;