import secrets
from fastapi import Depends, HTTPException, Security, status
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
from mcp_bridge.config import config
from loguru import logger

security = HTTPBearer(auto_error=False)

async def get_api_key(credentials: HTTPAuthorizationCredentials = Security(security)):
    """
    Validate the API key provided in the Authorization header.

    If no API key is configured in the server settings, authentication is skipped.
    If an API key is configured, the request must include a matching API key.

    Returns the API key if valid, or None if authentication is disabled.
    """

    return credentials.credentials

    # If no API key is configured, skip authentication
#     if not config.security.auth.enabled:
#         return None
#
#     if not credentials:
#         raise HTTPException(
#             status_code=status.HTTP_401_UNAUTHORIZED,
#             detail="API key is required in Authorization header (Bearer token)",
#         )
#
#     api_key = credentials.credentials
#     if await simple_key_checker(api_key):
#         return api_key
#
# # TODO: add aiocache wrapper?
# async def simple_key_checker(api_key: str) -> bool:
#     """
#     Check if the provided API key is valid.
#     """
#
#     # If API key is configured but not provided in the request
#     if not api_key:
#         raise HTTPException(
#             status_code=status.HTTP_401_UNAUTHORIZED,
#             detail="API key is required in Authorization header (Bearer token)",
#         )
#
#     # If API key is
#     for key in config.security.auth.api_keys:
#         if secrets.compare_digest(key.key, api_key):
#             return True
#
#     raise HTTPException(
#         status_code=status.HTTP_401_UNAUTHORIZED,
#         detail="Invalid API key",
#     )