feat: Introduce API key

Signed-off-by: Tom Kerkhove <[email protected]>

Author: tomkerkhove

deploy/kubernetes/deploy-orders.yaml

@@ -29,6 +29,11 @@ spec:
              key: AZURESTORAGE_CONNECTIONSTRING
         - name: SHIPMENTS_API_URI
           value: http://contoso-microservices-shipments-internal-service:88/api/v1/shipments
+        - name: SHIPMENTS_API_KEY
+          valueFrom:
+            secretKeyRef:
+             name: orders-secrets
+             key: SHIPMENTS_API_KEY
         livenessProbe:
             httpGet:
               path: /api/v1/health
@@ -66,4 +71,5 @@ metadata:
     app: contoso
     microservice: orders
 data:
-  AZURESTORAGE_CONNECTIONSTRING: <base64 encoded connection string>
+  AZURESTORAGE_CONNECTIONSTRING: <base64 encoded connection string>
+  SHIPMENTS_API_KEY: <APIM API key>

src/microservices/Demo.Microservices.Orders.API/Services/ShipmentService.cs

@@ -23,11 +23,18 @@ public ShipmentService(IConfiguration configuration)
         public async Task<ShipmentInformation> CreateAsync(Address address)
         {
             var shipmentBaseUri = _configuration["SHIPMENTS_API_URI"];
-
+            var request = new HttpRequestMessage(HttpMethod.Post, shipmentBaseUri);
+            
             var rawBody = JsonConvert.SerializeObject(address);
-            var postBody = new StringContent(rawBody,Encoding.UTF8, "application/json");
+            request.Content = new StringContent(rawBody,Encoding.UTF8, "application/json");
+
+            var shipmentApiKey = _configuration["SHIPMENTS_API_KEY"];
+            if (!string.IsNullOrWhiteSpace(shipmentApiKey))
+            {
+                request.Headers.Add("API-Key", shipmentApiKey);
+            }
 
-            var response = await _httpClient.PostAsync(shipmentBaseUri, postBody);
+            var response = await _httpClient.SendAsync(request);
             if (response.StatusCode != HttpStatusCode.Created)
             {
                 throw new Exception("Unable to initiate a shipment");