authentication.py

# Copyright The IETF Trust 2024, All Rights Reserved
#
from rest_framework import authentication
from django.contrib.auth.models import AnonymousUser


class ApiKeyAuthentication(authentication.BaseAuthentication):
    """API-Key header authentication"""

    def authenticate(self, request):
        """Extract the authentication token, if present
        
        This does not validate the token, it just arranges for it to be available in request.auth.
        It's up to a Permissions class to validate it for the appropriate endpoint.
        """
        token = request.META.get("HTTP_X_API_KEY", None)
        if token is None:
            return None
        return AnonymousUser(), token  # available as request.user and request.auth