[17.0][MIG] add fastapi_auth_api_key

[henrybackman]

Supercedes:

• [MIG][17.0] fastapi_auth_api_key: Migration to 17.0 #436

[petrus-v]

is it a real desired changed ? to avoid breaking consumer I would recomand to use same header as on previous version ie; https://github.com/OCA/rest-framework/blob/16.0/base_rest_auth_api_key/apispec/rest_method_security_plugin.py#L17

Suggested change

	key: Annotated[str, Depends(APIKeyHeader(name="HTTP-API-KEY"))],
	key: Annotated[str, Depends(APIKeyHeader(name="API-KEY"))],

[petrus-v]

As far I understand we must set an auth_api_key_group_id to make the endpoint working, is that correct?

if yes I would set the field as required or support the case there is no auth_api_key_group_id defined:

Suggested change

	if auth_api_key not in endpoint.sudo().auth_api_key_group_id.auth_api_key_ids:
	if endpoint.sudo().auth_api_key_group_id and auth_api_key not in endpoint.sudo().auth_api_key_group_id.auth_api_key_ids:

[petrus-v]

I'm not sure to understand the comment, maybe it's time on uncomment ?

Suggested change

	# TODO enable this when we know how to filter keys based
	# on endpoint's api key group.
	# An exception is raised when unauthorized api key record is found
	# with self.assertRaises(HTTPException) as error:
	# authenticated_auth_api_key("not_authorized", self.demo_env)
	with self.assertRaises(HTTPException) as error:
	authenticated_auth_api_key("not_authorized", self.demo_env, self.demo_endpoint)

[petrus-v]

I suppose this PR can be closed as superseded by #555