diff --git a/src/Dependencies.py b/src/Dependencies.py index 022aee1a6eef18fbf7c68b56ba6c93bfb891e395..da430ca3144e4a03ed981793f41a6f0d91871c7d 100644 --- a/src/Dependencies.py +++ b/src/Dependencies.py @@ -1,3 +1,5 @@ +import secrets + from fastapi import Security, HTTPException from fastapi.security import APIKeyHeader from starlette.status import HTTP_403_FORBIDDEN @@ -18,5 +20,5 @@ API_KEY_HEADER = APIKeyHeader(name='apiKey') async def check_api_key(apiKey: str = Security(API_KEY_HEADER)): from main import API_KEY - if apiKey != API_KEY: + if not secrets.compare_digest(API_KEY, apiKey): raise HTTPException(status_code=HTTP_403_FORBIDDEN, detail='apiKey invalid')