adding strict header check for player

Author: adl-trey

player/.env.example

@@ -9,6 +9,7 @@ DB_PASSWORD=quartz
 CONTENT_URL=http://localhost:63398/content
 
 PLAYER_ALTERNATE_AUTH_HEADER=
+PLAYER_REQUIRE_STRICT_HEADERS=
 
 API_KEY="some API access key"
 API_SECRET="an API access secret"

player/docker-compose.yml

@@ -46,6 +46,7 @@ services:
       - FIRST_TENANT_NAME
       - PLAYER_API_ROOT=${PLAYER_ROOT_PATH}
       - PLAYER_STANDALONE_LAUNCH_URL_BASE
+      - PLAYER_REQUIRE_STRICT_HEADERS
       - HOST_PORT
   rdbms:
     image: mysql:8.0.31

player/service/index.js

@@ -35,6 +35,9 @@ const Hapi = require("@hapi/hapi"),
     } = process.env;
 
 const rootPath = (process.env.PLAYER_API_ROOT || "");
+const requireStrictHeaders = (process.env.PLAYER_REQUIRE_STRICT_HEADERS || "true") == "true";
+
+console.log("Using Strict Headers: ", requireStrictHeaders);
 
 const provision = async () => {
     const server = Hapi.server(
@@ -46,6 +49,9 @@ const provision = async () => {
                     response: {
                         emptyStatusCode: 204
                     }
+                },
+                state: {
+                    strictHeader: requireStrictHeaders
                 }
             }
         ),