Add improvements

services/tenant/app/api/internal_demo.py

@@ -84,13 +84,6 @@ def parse_date_field(
     return None
 
 
-def verify_internal_api_key(x_internal_api_key: Optional[str] = Header(None)):
-    """Verify internal API key for service-to-service communication"""
-    if x_internal_api_key != settings.INTERNAL_API_KEY:
-        logger.warning("Unauthorized internal API access attempted")
-        raise HTTPException(status_code=403, detail="Invalid internal API key")
-    return True
-
 
 @router.post("/clone")
 async def clone_demo_data(
@@ -98,8 +91,7 @@ async def clone_demo_data(
     virtual_tenant_id: str,
     demo_account_type: str,
     session_id: Optional[str] = None,
-    db: AsyncSession = Depends(get_db),
-    _: bool = Depends(verify_internal_api_key)
+    db: AsyncSession = Depends(get_db)
 ):
     """
     Clone tenant service data for a virtual demo tenant
@@ -549,8 +541,7 @@ async def clone_demo_data(
 @router.post("/create-child")
 async def create_child_outlet(
     request: dict,
-    db: AsyncSession = Depends(get_db),
-    _: bool = Depends(verify_internal_api_key)
+    db: AsyncSession = Depends(get_db)
 ):
     """
     Create a child outlet tenant for enterprise demos
@@ -820,7 +811,7 @@ async def create_child_outlet(
 
 
 @router.get("/clone/health")
-async def clone_health_check(_: bool = Depends(verify_internal_api_key)):
+async def clone_health_check():
     """
     Health check for internal cloning endpoint
     Used by orchestrator to verify service availability

services/tenant/app/api/onboarding.py

@@ -41,25 +41,21 @@ async def get_onboarding_status(
         suppliers_url = os.getenv("SUPPLIERS_SERVICE_URL", "http://suppliers-service:8000")
         recipes_url = os.getenv("RECIPES_SERVICE_URL", "http://recipes-service:8000")
 
-        internal_api_key = settings.INTERNAL_API_KEY
-
+        
         # Fetch counts from all services in parallel
         async with httpx.AsyncClient(timeout=10.0) as client:
             results = await asyncio.gather(
                 client.get(
                     f"{inventory_url}/internal/count",
-                    params={"tenant_id": tenant_id},
-                    headers={"X-Internal-API-Key": internal_api_key}
+                    params={"tenant_id": tenant_id}
                 ),
                 client.get(
                     f"{suppliers_url}/internal/count",
-                    params={"tenant_id": tenant_id},
-                    headers={"X-Internal-API-Key": internal_api_key}
+                    params={"tenant_id": tenant_id}
                 ),
                 client.get(
                     f"{recipes_url}/internal/count",
-                    params={"tenant_id": tenant_id},
-                    headers={"X-Internal-API-Key": internal_api_key}
+                    params={"tenant_id": tenant_id}
                 ),
                 return_exceptions=True
             )