abiba-bot/inference-harness
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: reject requests without valid API key (401)

Browse Source
This commit is contained in:
Abiba
2026-05-19 19:15:13 +00:00
parent 5f05f46c7c
commit 5971ceee4e
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
router/router.py
+4 -1
View File
@@ -248,7 +248,10 @@ def chat():
try: try:
rd = request.get_json(force=True) rd = request.get_json(force=True)
ak = request.headers.get("Authorization","").replace("Bearer ","") ak = request.headers.get("Authorization","").replace("Bearer ","")
ki = API_KEYS.get(ak, {"tier":"starter","agent":"unknown"}) if not ak or ak not in API_KEYS:
log.warning("AUTH_REJECTED: no/invalid API key from %s", request.remote_addr)
return jsonify({"error": "Unauthorized — valid API key required"}), 401
ki = API_KEYS[ak]
tier, agent = ki["tier"], ki["agent"] tier, agent = ki["tier"], ki["agent"]
# Allow agent to override queue timeout via header # Allow agent to override queue timeout via header