21 lines
601 B
Python
21 lines
601 B
Python
|
"""
|
||
|
|
Shared FastAPI dependencies.
|
||
|
|
"""
|
||
|
|
|
||
|
|
import secrets
|
||
|
|
|
||
|
|
from fastapi import HTTPException, Security
|
||
|
|
from fastapi.security import APIKeyHeader
|
||
|
|
|
||
|
|
from app.config import settings
|
||
|
|
|
||
|
|
_api_key_header = APIKeyHeader(name="X-API-Key", auto_error=False)
|
||
|
|
|
||
|
|
|
||
|
|
async def verify_api_key(api_key: str | None = Security(_api_key_header)):
|
||
|
|
"""Verify API key if authentication is enabled."""
|
||
|
|
if settings.API_KEY is None:
|
||
|
|
return # Auth disabled
|
||
|
|
if api_key is None or not secrets.compare_digest(api_key, settings.API_KEY):
|
||
|
|
raise HTTPException(status_code=401, detail="Invalid or missing API key")
|