Authentication

curl https://your-domain.com/api/v1/moments/1969/apollo-11 \
  -H "X-Service-Key: your-service-key-here"

import requests

headers = {
    "X-Service-Key": "your-service-key-here"
}

response = requests.get(
    "https://your-domain.com/api/v1/moments/1969/apollo-11",
    headers=headers
)

async def verify_service_key(
    x_service_key: str = Header(..., alias="X-Service-Key"),
) -> str:
    settings = get_settings()
    if not settings.SERVICE_API_KEY:
        raise HTTPException(status_code=503, detail="Service key not configured")
    if not hmac.compare_digest(x_service_key, settings.SERVICE_API_KEY):
        raise HTTPException(status_code=403, detail="Invalid service key")
    return x_service_key

async def get_user_id(
    x_user_id: str | None = Header(None, alias="X-User-Id"),
) -> str | None:
    return x_user_id

curl https://your-domain.com/api/v1/moments/my-custom-moment \
  -H "X-Service-Key: your-service-key-here" \
  -H "X-User-Id: user-123"

headers = {
    "X-Service-Key": "your-service-key-here",
    "X-User-Id": "user-123"
}

response = requests.get(
    "https://your-domain.com/api/v1/moments/my-custom-moment",
    headers=headers
)

{
  "detail": "Invalid service key"
}

{
  "detail": "Service key not configured"
}

{
  "detail": "Moment not found"
}