ExpressAPI/assets/OpenAPI/OpenAPI.yaml

@@ -530,7 +530,7 @@ components:
         ExerciseChecker_Secret:
             type: apiKey
             in: header
-            name: ExerciseSecret
+            name: exercisesecret
     parameters:
         gitlabProjectIdOrNamespace:
             name: gitlabProjectIdOrNamespace

ExpressAPI/package.json

 {
     "name"           : "dojo_backend_api",
     "description"    : "Backend API of the Dojo project",
-    "version"        : "3.1.0",
+    "version"        : "3.1.1",
     "license"        : "AGPLv3",
     "author"         : "Michaël Minelli <dojo@minelli.me>",
     "main"           : "dist/src/app.js",

ExpressAPI/src/middlewares/SecurityMiddleware.ts

@@ -31,7 +31,7 @@ class SecurityMiddleware {
                                 isAllowed = isAllowed || (req.boundParams.assignment?.published ?? false);
                                 break;
                             case SecurityCheckType.EXERCISE_SECRET:
-                                isAllowed = isAllowed || (req.headers.ExerciseSecret as string | undefined) === req.boundParams.exercise!.secret;
+                                isAllowed = isAllowed || (req.headers.exercisesecret as string | undefined) === req.boundParams.exercise!.secret;
                                 break;
                             default:
                                 break;