From 91c33f698d92885cff97f7e9e20fbd57e0bae51d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=92=D0=B8=D0=BA=D1=82=D0=BE=D1=80?=
 <78488229+viktor138irk@users.noreply.github.com>
Date: Fri, 8 May 2026 04:13:26 +0900
Subject: [PATCH] Add basic authentication helper

---
 app/auth.py | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 app/auth.py

diff --git a/app/auth.py b/app/auth.py
new file mode 100644
index 0000000..67dad92
--- /dev/null
+++ b/app/auth.py
@@ -0,0 +1,28 @@
+import secrets
+from fastapi import Depends, HTTPException, status
+from fastapi.security import HTTPBasic, HTTPBasicCredentials
+
+from app.core import get_settings
+
+security = HTTPBasic(auto_error=False)
+
+
+def require_auth(credentials: HTTPBasicCredentials | None = Depends(security)) -> str:
+    settings = get_settings()
+    if not settings.auth_enabled:
+        return 'auth-disabled'
+    if credentials is None:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail='Authentication required',
+            headers={'WWW-Authenticate': 'Basic'},
+        )
+    username_ok = secrets.compare_digest(credentials.username, settings.admin_username)
+    password_ok = secrets.compare_digest(credentials.password, settings.admin_password)
+    if not username_ok or not password_ok:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail='Invalid username or password',
+            headers={'WWW-Authenticate': 'Basic'},
+        )
+    return credentials.username