Add improvements

services/procurement/app/api/internal_delivery.py

@@ -21,21 +21,12 @@ logger = structlog.get_logger()
 router = APIRouter(prefix="/internal", tags=["internal"])
 
 
-def verify_internal_api_key(x_internal_api_key: Optional[str] = Header(None)):
-    """Verify internal API key for service-to-service communication"""
-    if x_internal_api_key != settings.INTERNAL_API_KEY:
-        logger.warning("Unauthorized internal API access attempted")
-        raise HTTPException(status_code=403, detail="Invalid internal API key")
-    return True
-
-
 @router.get("/expected-deliveries")
 async def get_expected_deliveries(
     tenant_id: str = Query(..., description="Tenant UUID"),
     days_ahead: int = Query(1, description="Number of days to look ahead", ge=0, le=30),
     include_overdue: bool = Query(True, description="Include overdue deliveries"),
-    db: AsyncSession = Depends(get_db),
-    _: bool = Depends(verify_internal_api_key)
+    db: AsyncSession = Depends(get_db)
 ):
     """
     Get expected deliveries for delivery tracking system.

services/procurement/app/api/internal_demo.py

@@ -35,14 +35,6 @@ router = APIRouter(prefix="/internal/demo", tags=["internal"])
 DEMO_TENANT_PROFESSIONAL = "a1b2c3d4-e5f6-47a8-b9c0-d1e2f3a4b5c6"
 
 
-def verify_internal_api_key(x_internal_api_key: Optional[str] = Header(None)):
-    """Verify internal API key for service-to-service communication"""
-    if x_internal_api_key != settings.INTERNAL_API_KEY:
-        logger.warning("Unauthorized internal API access attempted")
-        raise HTTPException(status_code=403, detail="Invalid internal API key")
-    return True
-
-
 async def _emit_po_approval_alerts_for_demo(
     virtual_tenant_id: uuid.UUID,
     pending_pos: list[PurchaseOrder]
@@ -204,8 +196,7 @@ async def clone_demo_data(
     demo_account_type: str,
     session_id: Optional[str] = None,
     session_created_at: Optional[str] = None,
-    db: AsyncSession = Depends(get_db),
-    _: bool = Depends(verify_internal_api_key)
+    db: AsyncSession = Depends(get_db)
 ):
     """
     Clone procurement service data for a virtual demo tenant
@@ -645,7 +636,7 @@ async def clone_demo_data(
 
 
 @router.get("/clone/health")
-async def clone_health_check(_: bool = Depends(verify_internal_api_key)):
+async def clone_health_check():
     """
     Health check for internal cloning endpoint
     Used by orchestrator to verify service availability
@@ -660,8 +651,7 @@ async def clone_health_check(_: bool = Depends(verify_internal_api_key)):
 @router.delete("/tenant/{virtual_tenant_id}")
 async def delete_demo_data(
     virtual_tenant_id: str,
-    db: AsyncSession = Depends(get_db),
-    _: bool = Depends(verify_internal_api_key)
+    db: AsyncSession = Depends(get_db)
 ):
     """Delete all procurement data for a virtual demo tenant"""
     logger.info("Deleting procurement data for virtual tenant", virtual_tenant_id=virtual_tenant_id)