Mireya Cueto Garrido
fec26089ed
- Added JWT authentication support with configurable secret and expiration. - Introduced optional API key validation for endpoints. - Implemented tracking of publication downloads by researchers, storing records in a new PublicationDownload model. - Updated export endpoints to conditionally register downloads based on user authentication. - Enhanced researcher search response to indicate if publications were downloaded by the current user. - Updated environment configuration to include new JWT settings.
44 lines
1.2 KiB
Python
44 lines
1.2 KiB
Python
import os
|
|
from dotenv import load_dotenv
|
|
from fastapi import Depends, HTTPException, status
|
|
from fastapi.security import APIKeyHeader
|
|
|
|
# Cargar variables del .env
|
|
load_dotenv()
|
|
|
|
API_KEY_NAME = os.getenv("API_KEY_NAME")
|
|
API_KEY_VALUE = os.getenv("API_KEY_VALUE")
|
|
|
|
if not API_KEY_NAME:
|
|
raise RuntimeError("ERROR: La variable API_KEY_NAME no está definida en el .env")
|
|
|
|
if not API_KEY_VALUE:
|
|
raise RuntimeError("ERROR: La variable API_KEY_VALUE no está definida en el .env")
|
|
|
|
api_key_header = APIKeyHeader(name=API_KEY_NAME, auto_error=False)
|
|
|
|
|
|
def get_api_key(api_key: str = Depends(api_key_header)):
|
|
if api_key != API_KEY_VALUE:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="API key inválida o ausente."
|
|
)
|
|
return api_key
|
|
|
|
|
|
def get_api_key_optional(api_key: str = Depends(api_key_header)) -> str | None:
|
|
"""
|
|
Devuelve la API key si está presente y es correcta.
|
|
- Si no está presente: None
|
|
- Si está presente pero incorrecta: 401
|
|
"""
|
|
if api_key is None:
|
|
return None
|
|
if api_key != API_KEY_VALUE:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="API key inválida."
|
|
)
|
|
return api_key
|