refine server regarding injecting payloads (#236)

Co-authored-by: wolfy1339 <4595477+wolfy1339@users.noreply.github.com>

Author: Uzlopak

lib/server.js

@@ -25,6 +25,7 @@ if (process.env.SENTRY_DSN) {
 }
 
 const isProd = process.env.NODE_ENV === 'production'
+const port = parseInt(process.env.PORT, 10) || 3000
 const __dirname = new URL('.', import.meta.url).pathname
 
 const [
@@ -53,10 +54,38 @@ const [
     Sentry.setupFastifyErrorHandler(fastify)
   }
 
-  await fastify.register(fastifySwagger)
-  await fastify.register(fastifySwaggerUi)
-  await fastify.register(fastifyCors)
-  await fastify.register(fastifyHelmet)
+  await fastify.register(fastifySwagger, {
+    openapi: {
+      openapi: '3.0.0',
+      info: {
+        title: 'smee.io',
+        description: 'The smee.io REST-API',
+        version: '0.0.0'
+      },
+      servers: [
+        {
+          url: `http://localhost:${port}`,
+          description: 'Development server'
+        },
+        {
+          url: 'https://smee.io',
+          description: 'Production server'
+        }
+      ]
+    }
+  })
+  await fastify.register(fastifySwaggerUi, {
+    logo: false,
+    theme: {
+      title: 'smee.io API',
+    }
+  })
+  await fastify.register(fastifyCors, {
+    origin: '*',
+  })
+  await fastify.register(fastifyHelmet, {
+    contentSecurityPolicy: false
+  })
 
   if (process.env.FORCE_HTTPS) {
     await fastify.register(forceHttps)
@@ -265,6 +294,21 @@ const [
           }
         }
       },
+      headers: {
+        type: 'object',
+        properties: {
+          'x-github-event': { type: 'string' },
+          'x-github-delivery': { type: 'string', format: 'uuid' },
+          'x-hub-signature-256': {
+            type: 'string',
+            description: 'SHA256 HMAC hex digest of the body, using the webhook secret as the key, in the format sha256=...',
+            pattern: '^sha256=[a-f0-9]{64}$'
+          },
+        },
+        additionalProperties: {
+          type: 'string'
+        }
+      },
       body: {
         type: 'object'
       }
@@ -278,7 +322,7 @@ const [
         body: req.body,
         query: req.query,
         timestamp: Date.now()
-    })
+      })
 
     return reply.status(200).send()
   })
@@ -320,7 +364,6 @@ const [
       return reply.status(200).send()
     })
 
-  const port = parseInt(process.env.PORT, 10) || 3000
   fastify.listen({ port, host: '0.0.0.0' }, (err, address) => {
     if (err) {
       console.error(err)