Fix snyk vulnerabilities

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Guessed from System and Package relationships in Biz Ops
+* @Financial-Times/digital-newsroom

.snyk

@@ -0,0 +1,4 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.22.2
+ignore: {}
+patch: {}

app.json

@@ -14,8 +14,6 @@
   "env": {
     "AWS_ACCESS_KEY_ID" : "Your AWS Access Key ID Here",
     "AWS_SECRET_ACCESS_KEY" : "Your AWS Secret Key Here",
-    "ENDPOINT" : "ES Endpoint (ex: my-endpoint.region-1.es.amazonaws.com)",
-    "USER" : "HTTP Auth Username",
-    "PASSWORD" : "HTTP Auth Password"
+    "ENDPOINT" : "ES Endpoint (ex: my-endpoint.region-1.es.amazonaws.com)"
   }
 }

index.js

@@ -7,9 +7,10 @@ var express = require('express');
 var bodyParser = require('body-parser');
 var stream = require('stream');
 var figlet = require('figlet');
-var basicAuth = require('basic-auth-connect');
 var compress = require('compression');
 
+const EdTechAuth = require('@financial-times/ed-tech-auth');
+
 var yargs = require('yargs')
     .usage('usage: $0 [options] <aws-es-cluster-endpoint>')
     .option('b', {
@@ -33,18 +34,6 @@ var yargs = require('yargs')
         describe: 'the region of the Elasticsearch cluster',
         type: 'string'
     })
-    .option('u', {
-      alias: 'user',
-      default: process.env.USER,
-      demand: false,
-      describe: 'the username to access the proxy'
-    })
-    .option('a', {
-      alias: 'password',
-      default: process.env.PASSWORD,
-      demand: false,
-      describe: 'the password to access the proxy'
-    })
     .option('s', {
       alias: 'silent',
       default: false,
@@ -112,10 +101,13 @@ var proxy = httpProxy.createProxyServer({
 });
 
 var app = express();
+
+app.enable('trust proxy');
+
 app.use(compress());
-if (argv.u && argv.a) {
-  app.use(basicAuth(argv.u, argv.a));
-}
+const auth = new EdTechAuth(app);
+app.use(auth.middleware);
+
 app.use(bodyParser.raw({limit: REQ_LIMIT, type: function() { return true; }}));
 app.use(getCredentials);
 app.use(function (req, res) {
@@ -153,7 +145,7 @@ proxy.on('proxyRes', function (proxyReq, req, res) {
     }
 });
 
-http.createServer(app).listen(PORT, BIND_ADDRESS);
+http.createServer(app).listen(PORT);
 
 if(!argv.s) {
     console.log(figlet.textSync('AWS ES Proxy!', {