[add]: appId and apiKey validation

app/middlewares/verify_api_key.py

@@ -1,20 +1,26 @@
+from functools import wraps
 from flask import request
 from app.helpers.response_helper import ResponseHelper
 from app.utils.logger import logger
+import os
 
-# Define a valid API key (store securely in environment variables)
-VALID_API_KEY = "your-secure-api-key"
+# Load valid API key from environment variables (fallback for testing)
+VALID_API_KEY = os.getenv("VALID_API_KEY", "test-api-key-12345")
 
-def require_api_key():
-    """Middleware to check if API key is present and valid."""
-    api_key = request.headers.get("X-API-KEY")
+def require_api_key(f):
+    """Decorator to enforce API key authentication."""
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        api_key = request.headers.get("X-API-KEY")
 
-    if not api_key:
-        logger.error("Unauthorized access: Missing API key.")
-        return ResponseHelper.unauthorized("Missing API key")
+        if not api_key:
+            logger.error("Unauthorized access: Missing API key.")
+            return ResponseHelper.unauthorized("Missing API key")
 
-    if api_key != VALID_API_KEY:
-        logger.error("Unauthorized access: Invalid API key.")
-        return ResponseHelper.unauthorized("Invalid API key")
+        if api_key != VALID_API_KEY:
+            logger.error("Unauthorized access: Invalid API key.")
+            return ResponseHelper.unauthorized("Invalid API key")
 
-    return None
+        return f(*args, **kwargs)
+
+    return decorated_function