Move API validation decorator to its own file #yxdk

1 files changed, 21 insertions, 0 deletions

diff --git a/pysite/decorators.py b/pysite/decorators.py
new file mode 100644
index 00000000..6951e875
--- /dev/null
+++ b/pysite/decorators.py
@@ -0,0 +1,21 @@
+# coding=utf-8
+import os
+
+from flask import request
+
+from pysite.constants import ErrorCodes
+
+
+def valid_api_key(f):
+    """
+    Decorator to check if X-API-Key is valid.
+
+    Should only be applied to functions on APIView routes.
+    """
+
+    def has_valid_api_key(self, *args, **kwargs):
+        if not request.headers.get("X-API-Key") == os.environ.get("API_KEY"):
+            return self.error(ErrorCodes.invalid_api_key)
+        return f(*args, **kwargs)
+
+    return has_valid_api_key