Update main.py to use API Key verification instead of JWT

main.py

@@ -4,17 +4,16 @@ import json
 from typing import List, Optional
 from fastapi import FastAPI, HTTPException, Depends, Header, BackgroundTasks
 from pydantic import BaseModel
-from jose import jwt, JWTError
 from redis import Redis
 from rq import Queue
 import httpx
 
 # --- Configuration ---
-SUPABASE_JWT_SECRET = os.getenv("SUPABASE_JWT_SECRET", "")
-SUPABASE_URL = os.getenv("SUPABASE_URL", "")
-SUPABASE_SERVICE_ROLE_KEY = os.getenv("SUPABASE_SERVICE_ROLE_KEY", "")
+# This key MUST match exactly what Next.js sends
+EXECUTION_API_KEY = os.getenv("EXECUTION_API_KEY", "super_secret_piston_key_2026")
 
 app = FastAPI(title="Code Execution Gateway")
+
 redis_conn = Redis(host='localhost', port=6379)
 q = Queue('executions', connection=redis_conn)
 
@@ -24,42 +23,32 @@ class CodeExecutionRequest(BaseModel):
     source_code: str
     language: str
     is_submit: bool = False
+    user_id: str
 
 class ExecutionResponse(BaseModel):
     job_id: str
     status: str
 
-# --- Middleware: JWT Verification ---
-async def verify_supabase_jwt(authorization: str = Header(None)):
-    if not authorization or not authorization.startswith("Bearer "):
-        raise HTTPException(status_code=401, detail="Missing or invalid token")
-    
-    token = authorization.split(" ")[1]
-    try:
-        payload = jwt.decode(
-            token, 
-            SUPABASE_JWT_SECRET, 
-            algorithms=["HS256"], 
-            options={"verify_aud": False}
-        )
-        return payload  # Contains user_id (sub)
-    except JWTError:
-        raise HTTPException(status_code=401, detail="Token verification failed")
+# --- Middleware: API Key Verification ---
+async def verify_api_key(x_api_key: str = Header(None)):
+    if not x_api_key or x_api_key != EXECUTION_API_KEY:
+        raise HTTPException(status_code=401, detail="Invalid API Key")
+    return True
 
 # --- Core Logic ---
 @app.post("/execute", response_model=ExecutionResponse)
 async def execute_code(
     request: CodeExecutionRequest, 
-    user: dict = Depends(verify_supabase_jwt)
+    authorized: bool = Depends(verify_api_key)
 ):
     """
-    Validates user, pushes job to Redis queue, and returns immediately.
+    Validates API key, pushes job to Redis queue, and returns immediately.
     """
-    job_id = f"job_{int(time.time() * 1000)}_{user.get('sub')[:8]}"
+    job_id = f"job_{int(time.time() * 1000)}_{request.user_id[:8]}"
     
     job_data = {
         "job_id": job_id,
-        "user_id": user.get("sub"),
+        "user_id": request.user_id,
         "problem_id": request.problem_id,
         "source_code": request.source_code,
         "language": request.language,
@@ -69,7 +58,6 @@ async def execute_code(
 
     # Push to Redis Queue
     q.enqueue("worker.process_job", job_data, job_id=job_id)
-
     return {"job_id": job_id, "status": "queued"}
 
 @app.get("/health")