Files
whisperbox-transcribe/app/web/security.py
2023-01-07 11:35:31 +01:00

17 lines
486 B
Python

from hmac import compare_digest
from fastapi import Depends, HTTPException
from fastapi.security import OAuth2PasswordBearer
from app.shared.config import settings
def authenticate_api_key(
token: str = Depends(OAuth2PasswordBearer(tokenUrl="token")),
) -> None:
if not token:
raise HTTPException(status_code=422)
# use compare_digest to counter timing attacks.
if not compare_digest(settings.API_SECRET, token):
raise HTTPException(status_code=401)