Secure API Key Generator

const apiKeys = new Map([
  ['sk_live_example', {
    permissions: ['users:read'],
    rate_limit: '1000/hour',
    api_version: 'v1'
  }]
]);

function requirePermission(requiredPermission) {
  return (req, res, next) => {
    const apiKey = req.headers['authorization']?.replace('Bearer ', '');
    
    if (!apiKey) {
      return res.status(401).json({ error: 'API key required' });
    }
    
    const keyData = apiKeys.get(apiKey);
    if (!keyData) {
      return res.status(401).json({ error: 'Invalid API key' });
    }
    
    // Check permission
    const hasPermission = keyData.permissions.includes('*:*') || 
                         keyData.permissions.includes(requiredPermission);
    
    if (!hasPermission) {
      return res.status(403).json({ 
        error: 'Insufficient permissions',
        required: requiredPermission,
        granted: keyData.permissions
      });
    }
    
    req.apiKey = keyData;
    next();
  };
}

// Usage
app.get('/users', requirePermission('users:read'), (req, res) => {
  res.json({ users: [] });
});

app.post('/users', requirePermission('users:write'), (req, res) => {
  res.json({ message: 'User created' });
});

from functools import wraps
from flask import request, jsonify

API_KEYS = {
    'sk_live_example': {
        'permissions': ['users:read'],
        'rate_limit': '1000/hour',
        'api_version': 'v1'
    }
}

def require_permission(required_permission):
    def decorator(f):
        @wraps(f)
        def decorated_function(*args, **kwargs):
            auth_header = request.headers.get('Authorization', '')
            
            if not auth_header.startswith('Bearer '):
                return jsonify({'error': 'API key required'}), 401
            
            api_key = auth_header[7:]  # Remove 'Bearer '
            key_data = API_KEYS.get(api_key)
            
            if not key_data:
                return jsonify({'error': 'Invalid API key'}), 401
            
            permissions = key_data['permissions']
            has_permission = ('*:*' in permissions or 
                            required_permission in permissions)
            
            if not has_permission:
                return jsonify({
                    'error': 'Insufficient permissions',
                    'required': required_permission,
                    'granted': permissions
                }), 403
            
            request.api_key_data = key_data
            return f(*args, **kwargs)
        return decorated_function
    return decorator

# Usage
@app.route('/users')
@require_permission('users:read')
def get_users():
    return jsonify({'users': []})

@app.route('/users', methods=['POST'])
@require_permission('users:write')  
def create_user():
    return jsonify({'message': 'User created'})