from functools import wraps
from flask import request, abort, current_app

def require_token(f):
    @wraps(f)
    def wrapper(*args, **kwargs):
        expected = current_app.config.get("COMBAT_TOKEN")
        supplied = request.args.get("token") or request.headers.get("X-Token")
        if not expected or supplied != expected:
            abort(401)
        return f(*args, **kwargs)
    return wrapper