require("dotenv").config();

module.exports = function (req, res, next) {

  const appSignature = req.headers["app_signature"];

  if (!appSignature || appSignature !== process.env.APP_SIGNATURE) {
    return res.status(403).json({ message: "Access denied, invalid or missing APP_SIGNATURE" });
  }

  next(); // allow request to continue

};