API key authentication in FastAPI - Performance & Optimization

Performance: API key authentication

MEDIUM IMPACT

API key authentication affects server response time and initial request processing speed, impacting how fast the server can validate and respond to client requests.

Validating API keys on each request

FastAPI

from fastapi import FastAPI, Header, HTTPException

app = FastAPI()

API_KEYS = {"key1", "key2", "key3"}  # Use a set for O(1) lookup

@app.get("/items/")
async def read_items(x_api_key: str = Header(...)):
    if x_api_key not in API_KEYS:
        raise HTTPException(status_code=401, detail="Invalid API Key")
    return {"items": [1, 2, 3]}

Using a set for API keys enables constant time lookup, reducing request validation delay.

📈 Performance GainReduces lookup from O(N) to O(1), improving response time especially with many keys.

Validating API keys on each request

FastAPI

from fastapi import FastAPI, Header, HTTPException

app = FastAPI()

API_KEYS = ["key1", "key2", "key3"]

@app.get("/items/")
async def read_items(x_api_key: str = Header(...)):
    if x_api_key not in API_KEYS:
        raise HTTPException(status_code=401, detail="Invalid API Key")
    return {"items": [1, 2, 3]}

Checking API keys against a list on every request causes linear search, which slows down as the list grows.

📉 Performance CostTriggers O(N) lookup per request, increasing response time linearly with number of keys.

Performance Comparison

Pattern	DOM Operations	Reflows	Paint Cost	Verdict
API key checked with list lookup	N/A	N/A	N/A	[X] Bad
API key checked with set lookup	N/A	N/A	N/A	[OK] Good
API key fetched from DB on every request	N/A	N/A	N/A	[X] Bad
API key cached in memory at startup	N/A	N/A	N/A	[OK] Good

Rendering Pipeline

API key authentication happens before the main request processing. The server checks the key, which affects the time before response generation. This impacts the server's ability to quickly send back content.

→Request Handling

→Middleware Processing

→Response Generation

⚠️ BottleneckRequest Handling stage due to key validation logic and possible database or data structure lookup.

Core Web Vital Affected

INP

API key authentication affects server response time and initial request processing speed, impacting how fast the server can validate and respond to client requests.

Optimization Tips

1Use sets for API key storage to enable fast lookups.

2Avoid database queries for API keys on every request; cache keys in memory.

3Minimize blocking operations during API key validation to improve response time.

Performance Quiz - 3 Questions

What data structure improves API key lookup performance in FastAPI?

A Set

B List

C Tuple

D String

DevTools: Network and Performance

How to check: Open DevTools, go to Network tab, observe API request timings. Then use Performance tab to record and analyze server response times.

What to look for: Look for long server response times (TTFB) indicating slow API key validation. Faster responses show efficient authentication.