feat: implement graphql API with static key authentication

api/main.py

@@ -0,0 +1,33 @@
+import os
+from fastapi import FastAPI, Depends, HTTPException, Security
+from fastapi.security.api_key import APIKeyHeader
+from strawberry.fastapi import GraphQLRouter
+from dotenv import load_dotenv
+
+from api.schema import schema
+
+load_dotenv()
+
+API_KEY_NAME = "X-API-Key"
+api_key_header = APIKeyHeader(name=API_KEY_NAME, auto_error=False)
+
+def get_api_key(api_key_header: str = Security(api_key_header)):
+    expected_api_key = os.getenv("API_KEY")
+    if not expected_api_key:
+        # If no key is configured, deny all requests for safety
+        raise HTTPException(status_code=500, detail="API_KEY not configured on server")
+    
+    if api_key_header == expected_api_key:
+        return api_key_header
+    raise HTTPException(status_code=401, detail="Invalid or missing API Key")
+
+graphql_app = GraphQLRouter(schema)
+
+app = FastAPI(title="Wecker API")
+
+# Add auth dependency to the graphql route
+app.include_router(graphql_app, prefix="/graphql", dependencies=[Depends(get_api_key)])
+
+@app.get("/health")
+def health_check():
+    return {"status": "ok"}

api/schema.py

@@ -0,0 +1,68 @@
+import strawberry
+from typing import List, Optional
+import os
+from api.crontab_manager import CrontabManager
+
+def get_manager():
+    tabfile = os.getenv("TABFILE")
+    return CrontabManager(tabfile=tabfile)
+
+@strawberry.type
+class Alarm:
+    id: str
+    cron_expression: str
+    command: str
+    is_enabled: bool
+
+@strawberry.type
+class Query:
+    @strawberry.field
+    def get_alarms(self) -> List[Alarm]:
+        manager = get_manager()
+        return [Alarm(**a) for a in manager.get_alarms()]
+
+    @strawberry.field
+    def get_alarm(self, id: str) -> Optional[Alarm]:
+        manager = get_manager()
+        alarms = manager.get_alarms()
+        for a in alarms:
+            if a["id"] == id:
+                return Alarm(**a)
+        return None
+
+@strawberry.type
+class Mutation:
+    @strawberry.field
+    def set_alarm(
+        self,
+        cron_expression: str,
+        command: str,
+        is_enabled: bool = True,
+        id: Optional[str] = None
+    ) -> Alarm:
+        manager = get_manager()
+        new_id = manager.set_alarm(
+            alarm_id=id,
+            cron_expression=cron_expression,
+            command=command,
+            is_enabled=is_enabled
+        )
+        return Alarm(
+            id=new_id,
+            cron_expression=cron_expression,
+            command=command,
+            is_enabled=is_enabled
+        )
+
+    @strawberry.field
+    def delete_alarm(self, id: str) -> bool:
+        manager = get_manager()
+        # Verify it exists
+        alarms = manager.get_alarms()
+        exists = any(a["id"] == id for a in alarms)
+        if exists:
+            manager.delete_alarm(id)
+            return True
+        return False
+
+schema = strawberry.Schema(query=Query, mutation=Mutation)