INNER CODE UNIT · Python
auth_middleware
TianGzlab/OmicsClaw · omicsclaw/memory/server.py:99
async def auth_middleware(request: Request, call_next):
if not _api_token:
return await call_next(request)
if request.url.path == "/health":
return await call_next(request)
auth_header = request.headers.get("Authorization", "")
if not auth_header.startswith("Bearer "):
return JSONResponse(status_code=401, content={"detail": "Unauthorized"})
provided = auth_header.removeprefix("Bearer ").strip()
if not secrets.compare_digest(provided, _api_token):
return JSONResponse(status_code=401, content={"detail": "Unauthorized"})
return await call_next(request)
# Register API routers
from .api.browse import router as browse_router
from .api.review import router as review_router
from .api.maintenance import router as maintenance_router