Update app/core/auth.py

app/core/auth.py

@@ -0,0 +1,25 @@
+from datetime import datetime
+from fastapi import HTTPException, Security, status
+from fastapi.security import APIKeyHeader
+from ..core.config import settings
+
+# API Key header scheme for service token
+SERVICE_TOKEN_HEADER = APIKeyHeader(name="X-Service-Token", auto_error=False)
+
+async def verify_service_token(token: str = Security(SERVICE_TOKEN_HEADER)) -> bool:
+    """Verify the service token for internal service-to-service communication."""
+    if not token:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Service token is required",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+    
+    if token != settings.SERVICE_TOKEN:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Invalid service token",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+    
+    return True