Update main.py

main.py

@@ -6,7 +6,7 @@ import psutil
 import time
 from datetime import datetime
 from typing import Optional
-from fastapi import FastAPI, Query, HTTPException, Body, BackgroundTasks
+from fastapi import FastAPI, Query, HTTPException, Body, BackgroundTasks, Header
 from contextlib import asynccontextmanager
 from pydantic import BaseModel
 from fastapi.responses import FileResponse
@@ -48,6 +48,7 @@ async def get_free_account():
         raise HTTPException(status_code=500, detail=res["error"])
     return res
 
+API_KEY = os.getenv("API_KEY")
 
 class DailyRequest(BaseModel):
     cookie: str
@@ -55,7 +56,16 @@ class DailyRequest(BaseModel):
     server: str
 
 @app.post("/api/v1/genshin/daily")
-async def genshin_daily(data: DailyRequest):
+async def genshin_daily(
+    data: DailyRequest,
+    x_api_key: str = Header(None)
+):
+    if not API_KEY:
+        raise HTTPException(status_code=500, detail="Server chưa cấu hình API_KEY")
+
+    if x_api_key != API_KEY:
+        raise HTTPException(status_code=403, detail="API key không hợp lệ")
+
     res = await gs_app.run_daily_and_capture(
         data.cookie,
         data.discord_id,