添加API密钥管理、模型服务和安全服务，并优化FastAPI应用程序配置

app/core/security.py

@@ -0,0 +1,30 @@
+from fastapi import HTTPException, Header
+import logging
+from typing import Optional
+
+logger = logging.getLogger(__name__)
+
+
+class SecurityService:
+    def __init__(self, allowed_tokens: list):
+        self.allowed_tokens = allowed_tokens
+
+    async def verify_authorization(
+        self, authorization: Optional[str] = Header(None)
+    ) -> str:
+        if not authorization:
+            logger.error("Missing Authorization header")
+            raise HTTPException(status_code=401, detail="Missing Authorization header")
+
+        if not authorization.startswith("Bearer "):
+            logger.error("Invalid Authorization header format")
+            raise HTTPException(
+                status_code=401, detail="Invalid Authorization header format"
+            )
+
+        token = authorization.replace("Bearer ", "")
+        if token not in self.allowed_tokens:
+            logger.error("Invalid token")
+            raise HTTPException(status_code=401, detail="Invalid token")
+
+        return token