Create auth.py

auth.py

@@ -0,0 +1,34 @@
+from fastapi import Header, HTTPException
+import time
+
+# ⚡ Demo in-memory keys (replace with DB later)
+API_KEYS = {
+    "free_key_123": {"plan": "free", "limit": 100},
+    "pro_key_456": {"plan": "pro", "limit": 10000},
+}
+
+request_log = {}
+
+
+def verify_api_key(x_api_key: str = Header(...)):
+    if x_api_key not in API_KEYS:
+        raise HTTPException(status_code=401, detail="Invalid API Key")
+
+    plan = API_KEYS[x_api_key]["plan"]
+    limit = API_KEYS[x_api_key]["limit"]
+
+    now = int(time.time())
+    window = 60  # 1 minute window
+
+    logs = request_log.get(x_api_key, [])
+    logs = [t for t in logs if now - t < window]
+
+    if len(logs) >= limit:
+        raise HTTPException(
+            status_code=429,
+            detail=f"Rate limit exceeded for {plan} plan"
+        )
+
+    logs.append(now)
+    request_log[x_api_key] = logs
+    return True