Update app.py

app.py

@@ -16,13 +16,26 @@ REFRESH_TOKEN_EXPIRATION_DAYS = int(os.getenv("REFRESH_TOKEN_EXPIRATION_DAYS", 7
 ALLOWED_ORIGIN = os.getenv("ALLOWED_ORIGIN")
 
 
+
+# Load environment variables
 hashed_password = os.getenv("DUMMY_USER_KEY")
 
+if hashed_password:
+    # Ensure it's stored as a hashed password (not plain text)
+    hashed_password = bcrypt.hashpw(hashed_password.encode(), bcrypt.gensalt()).decode()
+
 # Fake database of API keys (hashed)
 API_KEYS_DB = {
     "user1": hashed_password
 }
 
+def verify_api_key(api_key: str) -> bool:
+    """Check if the provided API key is valid."""
+    for hashed_key in API_KEYS_DB.values():
+        if hashed_key and bcrypt.checkpw(api_key.encode(), hashed_key.encode()):
+            return True
+    return False
+
 app = FastAPI()
 
 # Configure CORS for security (allow only trusted frontend)