Spaces:
Runtime error
Runtime error
File size: 2,011 Bytes
2a146da | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 | from __future__ import annotations
import secrets
from fastapi import Depends, HTTPException, Request, status
from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
PUBLIC_PATHS = {
"/",
"/api/health",
"/api/health/live",
"/api/health/ready",
"/docs",
"/redoc",
"/openapi.json",
}
bearer_scheme = HTTPBearer(
auto_error=False,
)
def verify_api_key(
request: Request,
credentials: HTTPAuthorizationCredentials | None,
) -> None:
"""Verify the configured PathoVerse Bearer API key."""
if request.url.path in PUBLIC_PATHS:
return
from pathoverse.config import get_settings
settings = get_settings()
if settings.environment in {"development", "test"}:
return
expected_key = settings.api_key.strip()
if not expected_key:
raise HTTPException(
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
detail="API authentication is not configured.",
)
if credentials is None:
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="Authentication required.",
headers={"WWW-Authenticate": "Bearer"},
)
if credentials.scheme.lower() != "bearer":
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="Invalid authentication scheme.",
headers={"WWW-Authenticate": "Bearer"},
)
if not secrets.compare_digest(
credentials.credentials,
expected_key,
):
raise HTTPException(
status_code=status.HTTP_401_UNAUTHORIZED,
detail="Invalid API credentials.",
headers={"WWW-Authenticate": "Bearer"},
)
async def require_api_key(
request: Request,
credentials: HTTPAuthorizationCredentials | None = Depends(
bearer_scheme
),
) -> None:
"""FastAPI dependency for protected PathoVerse API endpoints."""
verify_api_key(request, credentials) |