refactor: restructure project layout

app/web/security.py

@@ -0,0 +1,16 @@
+from hmac import compare_digest
+
+from fastapi import Depends, HTTPException
+from fastapi.security import OAuth2PasswordBearer
+
+from app.shared.config import settings
+
+
+def authenticate_api_key(
+    token: str = Depends(OAuth2PasswordBearer(tokenUrl="token")),
+) -> None:
+    if not token:
+        raise HTTPException(status_code=422)
+    # use compare_digest to counter timing attacks.
+    if not compare_digest(settings.API_SECRET, token):
+        raise HTTPException(status_code=401)