VivianDee
26 lines
847 B
Python
26 lines
847 B
Python
from functools import wraps
|
|
from flask import request, jsonify
|
|
from app.utils.logger import logger
|
|
import os
|
|
|
|
# Load valid API key from environment variables (fallback for testing)
|
|
VALID_API_KEY = os.getenv("VALID_API_KEY", "test-api-key-12345")
|
|
|
|
def require_api_key(f):
|
|
"""Decorator to enforce API key authentication."""
|
|
@wraps(f)
|
|
def decorated_function(*args, **kwargs):
|
|
api_key = request.headers.get("X-API-KEY")
|
|
|
|
if not api_key:
|
|
logger.error("Unauthorized access: Missing API key.")
|
|
return jsonify({"message": "Invalid request parameters"}), 400
|
|
|
|
if api_key != VALID_API_KEY:
|
|
logger.error("Unauthorized access: Invalid API key.")
|
|
return jsonify({"message": "Invalid request parameters"}), 400
|
|
|
|
return f(*args, **kwargs)
|
|
|
|
return decorated_function
|