From b854d8f22ea16f02cfd516275d13e61c81964333 Mon Sep 17 00:00:00 2001
From: Johannes Christ <jc@jchri.st>
Date: Tue, 14 Aug 2018 22:34:45 +0200
Subject: Add bot API key permission check.

---
 pysite/permissions.py | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 pysite/permissions.py

(limited to 'pysite/permissions.py')

diff --git a/pysite/permissions.py b/pysite/permissions.py
new file mode 100644
index 00000000..2a96b819
--- /dev/null
+++ b/pysite/permissions.py
@@ -0,0 +1,8 @@
+from django.conf import setting
+from rest_framework import permissions
+
+
+class HasValidAPIKey(permissions.BasePermission):
+    def has_permission(self, request, view):
+        api_key = request.META.get('HTTP_X_API_KEY')
+        return api_key == settings.BOT_API_KEY
-- 
cgit v1.2.3