Spaces:
Sleeping
Sleeping
File size: 1,052 Bytes
34da398 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 | from __future__ import annotations
import secrets
from fastapi import Header, HTTPException, status
from app.config import settings
def verify_api_key(key: str) -> bool:
"""Constant-time check against every configured API key."""
valid = False
for stored_key in settings.api_keys_list:
if secrets.compare_digest(stored_key.encode(), key.encode()):
valid = True
return valid
def verify_admin_key(key: str) -> bool:
if not settings.admin_key:
return False
return secrets.compare_digest(settings.admin_key.encode(), key.encode())
def get_api_key(x_api_key: str = Header(..., alias="X-Api-Key")) -> str:
if not verify_api_key(x_api_key):
raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid API key")
return x_api_key
def get_admin_key(x_api_key: str = Header(..., alias="X-Api-Key")) -> str:
if not verify_admin_key(x_api_key):
raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid admin key")
return x_api_key
|