feat(fastapi):

- removed cors

Author: ChrisCoder9000

.env.example

@@ -39,3 +39,6 @@ MONGO_PORT=27017
 MONGO_USERNAME="root"
 MONGO_PASSWORD="password"
 
+# Auth
+# Used to handle authentication
+BRAINPAT_TOKEN="your_token"

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "brainapi2"
-version = "1.5.5-dev"
+version = "1.5.6-dev"
 description = "Version 1.x.x of the BrainAPI memory layer."
 authors = [
     {name = "Christian",email = "alch.infoemail@gmail.com"}

src/config.py

@@ -128,16 +128,11 @@ def __init__(self):
         self.milvus = MilvusConfig()
         self.embeddings = EmbeddingsConfig()
         self.mongo = MongoConfig()
-        self.cors = CorsConfig()
 
+        self.brainpat_token = os.getenv("BRAINPAT_TOKEN")
 
-class CorsConfig:
-    """
-    Configuration class for the Cors configuration.
-    """
-
-    def __init__(self):
-        self.origins = os.getenv("CORS_ORIGINS", "*").split(",")
+        if not self.brainpat_token:
+            raise ValueError("BrainPAT token is not set")
 
 
 config = Config()

src/services/api/app.py

@@ -14,16 +14,18 @@
 from fastapi.middleware.cors import CORSMiddleware
 from uvicorn import run
 
+from src.services.api.middlewares.auth import BrainPATMiddleware
 from src.services.api.routes.ingest import ingest_router
 from src.services.api.routes.retrieve import retrieve_router
 from src.services.api.routes.meta import meta_router
-from src.config import config
+
 
 app = FastAPI()
 
+app.add_middleware(BrainPATMiddleware)
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=config.cors.origins,
+    allow_origins=["*"],
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],

src/services/api/middlewares/__init__.py

@@ -0,0 +1,9 @@
+"""
+File: /__init__.py
+Created Date: Thursday November 27th 2025
+Author: Christian Nonis <alch.infoemail@gmail.com>
+-----
+Last Modified: Thursday November 27th 2025 10:19:56 pm
+Modified By: the developer formerly known as Christian Nonis at <alch.infoemail@gmail.com>
+-----
+"""

src/services/api/middlewares/auth.py

@@ -0,0 +1,28 @@
+"""
+File: /auth.py
+Created Date: Thursday November 27th 2025
+Author: Christian Nonis <alch.infoemail@gmail.com>
+-----
+Last Modified: Thursday November 27th 2025 10:20:03 pm
+Modified By: the developer formerly known as Christian Nonis at <alch.infoemail@gmail.com>
+-----
+"""
+
+from fastapi import Request
+from fastapi.responses import JSONResponse
+from starlette.middleware.base import BaseHTTPMiddleware
+from starlette import status
+
+from src.config import config
+
+
+class BrainPATMiddleware(BaseHTTPMiddleware):
+    async def dispatch(self, request: Request, call_next):
+        brainpat = request.headers.get("BrainPAT")
+        if brainpat != config.brainpat_token:
+            return JSONResponse(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                content={"detail": "Invalid or missing BrainPAT header"},
+            )
+        response = await call_next(request)
+        return response