moved authentication

app/auth.py

@@ -1,7 +1,18 @@
 from fastapi import HTTPException, Header, Depends
 from fastapi.security import APIKeyHeader
 from typing import Optional
-import config # Changed from relative to absolute from app/
+from config import API_KEY # Import API_KEY directly for use in local validation
+
+# Function to validate API key (moved from config.py)
+def validate_api_key(api_key_to_validate: str) -> bool:
+    """
+    Validate the provided API key against the configured key.
+    """
+    if not API_KEY: # API_KEY is imported from config
+        # If no API key is configured, authentication is disabled (or treat as invalid)
+        # Depending on desired behavior, for now, let's assume if API_KEY is not set, all keys are invalid unless it's an empty string match
+        return False # Or True if you want to disable auth when API_KEY is not set
+    return api_key_to_validate == API_KEY
 
 # API Key security scheme
 api_key_header = APIKeyHeader(name="Authorization", auto_error=False)
@@ -25,7 +36,7 @@ async def get_api_key(authorization: Optional[str] = Header(None)):
     api_key = authorization.replace("Bearer ", "")
     
     # Validate the API key
-    if not config.validate_api_key(api_key):
+    if not validate_api_key(api_key): # Call local validate_api_key
         raise HTTPException(
             status_code=401,
             detail="Invalid API key"

app/config.py

@@ -19,19 +19,4 @@ VERTEX_EXPRESS_API_KEY_VAL = os.environ.get("VERTEX_EXPRESS_API_KEY")
 FAKE_STREAMING_ENABLED = os.environ.get("FAKE_STREAMING", "false").lower() == "true"
 FAKE_STREAMING_INTERVAL_SECONDS = float(os.environ.get("FAKE_STREAMING_INTERVAL", "1.0"))
 
-# Function to validate API key
-def validate_api_key(api_key: str) -> bool:
-    """
-    Validate the provided API key against the configured key
-    
-    Args:
-        api_key: The API key to validate
-        
-    Returns:
-        bool: True if the key is valid, False otherwise
-    """
-    if not API_KEY:
-        # If no API key is configured, authentication is disabled
-        return True
-    
-    return api_key == API_KEY
+# Validation logic moved to app/auth.py