from fastapi import FastAPI

from fastapi import FastAPI, Request, status

from starlette.responses import JSONResponse

from beats.settings import settings

    "https://lifepete.com",
    "http://lifepete.com"

@app.middleware("http")
async def authenticate(request: Request, call_next):
    logger.error(request.method)
    PROTECTED_METHODS = ["POST", "PUT", "PATCH"]
    if request.method in PROTECTED_METHODS and "X-API-Token" not in request.headers:
        return JSONResponse(
            content={"error": "Header X-API-Token is required for all POST actions"},
            status_code=status.HTTP_401_UNAUTHORIZED
        )
    if request.method in PROTECTED_METHODS and request.headers["X-API-Token"] != settings.access_token:
        return JSONResponse(
            content={"error": "your X-API-Token is not valid"},
            status_code=status.HTTP_401_UNAUTHORIZED
        )
    response = await call_next(request)
    return response

    access_token: str = Field(default="secret", env="ACCESS_TOKEN")