"""API 鉴权依赖."""
import os

from fastapi import Header, HTTPException, status

from config.device import DEVICE_CONFIG


def verify_api_key(x_api_key: str = Header(None)) -> None:
    """验证 API Key；未配置时允许访问（向后兼容本地开发）."""
    expected = DEVICE_CONFIG.get("api_key") or os.environ.get("API_KEY")
    if expected and x_api_key != expected:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Invalid API key",
        )