feat: validate x-api-key only and remove client id

app.py

@@ -20,7 +20,6 @@ from fastapi.openapi.docs import (
 load_dotenv()
 IS_DEV = os.environ.get('ENV', 'DEV') != 'PROD'
 AWS_S3_BUCKET_NAME = os.getenv('AWS_S3_BUCKET_NAME', '')
-CLIENT_ID = os.environ.get('CLIENT_ID')
 X_API_KEY = os.environ.get('X_API_KEY')
 
 logging.basicConfig(
@@ -68,7 +67,6 @@ def healthcheck():
 @app.post("/image")
 async def upload(
     o: ImageObject,
-    client_id: str = Header(...),
     x_request_user: str = Header(...),
     x_api_key: str = Header(...)
 ):
@@ -76,7 +74,7 @@ async def upload(
     logging.info("--------------------------------")
     logging.info("Received request to upload image")
     
-    if is_valid(client_id, x_api_key):
+    if is_valid(x_api_key):
         key = f'{o.key}/{o.job_no}/{o.name}'
         logging.info(f'Key for S3 upload: {key}')
         if o.content is not None:
@@ -103,7 +101,6 @@ async def upload(
 
 @app.post("/image-multiparts")
 async def upload2(
-    client_id: str = Header(...),
     x_request_user: str = Header(...),
     x_api_key: str = Header(...),
     job_no: Annotated[str, Form()] = '',
@@ -118,7 +115,7 @@ async def upload2(
     logging.info("Received request to upload image")
 
     # Validate headers
-    if not is_valid(client_id, x_api_key):
+    if not is_valid(x_api_key):
         res.status = HTTPStatus.FORBIDDEN
         res.error = "Invalid credentials"
         return res.json()
@@ -147,8 +144,8 @@ async def upload2(
     
     return res.json()
 
-def is_valid(u, p):
-    return u == CLIENT_ID and p == X_API_KEY
+def is_valid(p):
+    return p == X_API_KEY
 
 if __name__=='__main__':
     uvicorn.run('app:app', host='0.0.0.0', port=7860, reload=True)