From 5abab02e61d62e93f9a7fb2d6da9a1b6a77a185e Mon Sep 17 00:00:00 2001 From: Marcos Lohmann Date: Mon, 22 Sep 2025 13:45:39 -0300 Subject: [PATCH] Update app.py --- GenAI/proxy/app.py | 34 +++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/GenAI/proxy/app.py b/GenAI/proxy/app.py index df94649..0f66521 100644 --- a/GenAI/proxy/app.py +++ b/GenAI/proxy/app.py @@ -62,6 +62,23 @@ if not TEST_MODE: print("Executando em modo de teste...") TEST_MODE = True +# ========================== +# Segurança API +# ========================== + +def check_api_key(): + expected_key = os.environ.get("API_KEY") + if not expected_key: + print("AVISO: API_KEY não configurada nas variáveis de ambiente.") + return + provided_key = request.headers.get("X-API-Key") + if provided_key != expected_key: + abort(401, description="Chave de API inválida ou ausente.") + +@app.before_request +def before_all_requests(): + check_api_key() + # ========================== # Variáveis de Bucket / Uploads # ========================== @@ -86,23 +103,6 @@ if not TEST_MODE: # Session store para mapear file_id -> object_name (para fallback de download) FILE_INDEX: Dict[str, str] = {} -# ========================== -# Segurança API -# ========================== - -def check_api_key(): - expected_key = os.environ.get("API_KEY") - if not expected_key: - print("AVISO: API_KEY não configurada nas variáveis de ambiente.") - return - provided_key = request.headers.get("X-API-Key") - if provided_key != expected_key: - abort(401, description="Chave de API inválida ou ausente.") - -@app.before_request -def before_all_requests(): - check_api_key() - # ========================== # Helpers: Signed URL (PAR) + Upload # ==========================