gurix/wecker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: explicitly handle missing API key header

Browse Source
This commit is contained in:
gurix
2026-06-18 17:20:01 +02:00
parent 0472de5a5d
commit 77f215be84
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/main.py
+5 -3
View File
@@ -19,9 +19,11 @@ def get_api_key(api_key_header: str = Security(api_key_header)):
# If no key is configured, deny all requests for safety # If no key is configured, deny all requests for safety
raise HTTPException(status_code=500, detail="API_KEY not configured on server") raise HTTPException(status_code=500, detail="API_KEY not configured on server")
if hmac.compare_digest(api_key_header or "", expected_api_key): if api_key_header is None:
return api_key_header raise HTTPException(status_code=401, detail="Missing API Key")
raise HTTPException(status_code=401, detail="Invalid or missing API Key") if not hmac.compare_digest(api_key_header, expected_api_key):
raise HTTPException(status_code=401, detail="Invalid API Key")
return api_key_header
graphql_app = GraphQLRouter(schema) graphql_app = GraphQLRouter(schema)