From a75cd6d6f7b5767c37b24beeb7f2dadf541f06a5 Mon Sep 17 00:00:00 2001
From: Chris Young <chris.young12@nhs.net>
Date: Wed, 21 Feb 2024 15:14:29 +0000
Subject: [PATCH] Added secret for WAF API token

---
 manifest_template.yml                                 |  2 +-
 .../apiproxy/policies/AssignMessage.AddAPIToken.xml   | 11 +++++++++++
 proxies/live/apiproxy/targets/target.xml              |  5 ++++-
 3 files changed, 16 insertions(+), 2 deletions(-)
 create mode 100644 proxies/live/apiproxy/policies/AssignMessage.AddAPIToken.xml

diff --git a/manifest_template.yml b/manifest_template.yml
index 8828ad5..f45fce2 100644
--- a/manifest_template.yml
+++ b/manifest_template.yml
@@ -1,6 +1,6 @@
 SERVICE_NAME: validated-relationships-service-api
 PRODUCT_DISPLAY_NAME: validated-relationships-service-api
-DESCRIPTION: example description
+DESCRIPTION: Validated Relationships Service API
 APIGEE_ENVIRONMENTS:
   - name: internal-dev
     display_name: Internal Development
diff --git a/proxies/live/apiproxy/policies/AssignMessage.AddAPIToken.xml b/proxies/live/apiproxy/policies/AssignMessage.AddAPIToken.xml
new file mode 100644
index 0000000..c4565a5
--- /dev/null
+++ b/proxies/live/apiproxy/policies/AssignMessage.AddAPIToken.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<AssignMessage async="false" continueOnError="false" enabled="true" name="AddAPIToken">
+    <DisplayName>Add API Token</DisplayName>
+    <Add>
+        <Headers>
+            <Header name="x-origin-shared-secret">{private.environment_kvm_data.apikey}</Header>
+        </Headers>
+    </Add>
+    <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
+    <AssignTo createNew="false" transport="http" type="request"/>
+</AssignMessage>
\ No newline at end of file
diff --git a/proxies/live/apiproxy/targets/target.xml b/proxies/live/apiproxy/targets/target.xml
index abc28f8..fd6c483 100644
--- a/proxies/live/apiproxy/targets/target.xml
+++ b/proxies/live/apiproxy/targets/target.xml
@@ -7,6 +7,9 @@
       <Step>
         <Name>FlowCallout.ApplyRateLimiting</Name>
       </Step>
+      <Step>
+        <Name>AddAPIToken</Name>
+      </Step>
     </Request>
   </PreFlow>
   <FaultRules>
@@ -24,7 +27,7 @@
       <!--TODO: The target needs to configured on a per enironment basis (NPA-1979)
           This URL will also need to change once we have DNS in place (NPA-1669)
       -->
-      <URL>https://6e6ljoc1a5.execute-api.eu-west-2.amazonaws.com/default/api</URL>
+      <URL>https://jfhedvdn0k.execute-api.eu-west-2.amazonaws.com/default/api</URL>
       <Properties>
           <Property name="supports.http10">true</Property>
           <Property name="request.retain.headers">User-Agent,Referer,Accept-Language</Property>