feat: implement graphql API with static key authentication

api/main.py

@@ -0,0 +1,33 @@
+import os
+from fastapi import FastAPI, Depends, HTTPException, Security
+from fastapi.security.api_key import APIKeyHeader
+from strawberry.fastapi import GraphQLRouter
+from dotenv import load_dotenv
+
+from api.schema import schema
+
+load_dotenv()
+
+API_KEY_NAME = "X-API-Key"
+api_key_header = APIKeyHeader(name=API_KEY_NAME, auto_error=False)
+
+def get_api_key(api_key_header: str = Security(api_key_header)):
+    expected_api_key = os.getenv("API_KEY")
+    if not expected_api_key:
+        # If no key is configured, deny all requests for safety
+        raise HTTPException(status_code=500, detail="API_KEY not configured on server")
+    
+    if api_key_header == expected_api_key:
+        return api_key_header
+    raise HTTPException(status_code=401, detail="Invalid or missing API Key")
+
+graphql_app = GraphQLRouter(schema)
+
+app = FastAPI(title="Wecker API")
+
+# Add auth dependency to the graphql route
+app.include_router(graphql_app, prefix="/graphql", dependencies=[Depends(get_api_key)])
+
+@app.get("/health")
+def health_check():
+    return {"status": "ok"}