Add API key

app.py

@@ -3,7 +3,7 @@ import os
 import shutil
 import logging
 import uvicorn
-from fastapi import FastAPI, File, UploadFile
+from fastapi import FastAPI, File, UploadFile, Header, HTTPException
 from fastapi.middleware.cors import CORSMiddleware
 
 # This ensures our models are downloaded and config is set before anything
@@ -36,7 +36,18 @@ async def root():
     return {"status": "ok", "message": "API is running"}
 
 @app.post("/process")
-async def process_pdf(file: UploadFile = File(...)):
+async def process_pdf(
+    file: UploadFile = File(...),
+    x_api_key: str = Header(None, alias="X-API-Key")
+):
+    # Get the secret key from environment variable
+    api_key = os.getenv("SECRET_KEY")
+    
+    if not x_api_key:
+        raise HTTPException(status_code=401, detail="API key is missing")
+    
+    if x_api_key != api_key:
+        raise HTTPException(status_code=401, detail="Invalid API key")
 
     file_path = os.path.join(INBOX_DIR, file.filename)
     with open(file_path, "wb") as out_file: