Spaces:
Running
Running
Doc: recommend GRADIO_AUTH for public BYOK
Browse files
README.md
CHANGED
|
@@ -31,6 +31,8 @@ python app.py # opens on http://0.0.0.0:7860
|
|
| 31 |
- `API_TESTER_HTML` – optional path to a custom HTML tester file (defaults to bundled `api-tester.html`).
|
| 32 |
- `PORT` or `GRADIO_PORT` – port to bind (default 7860).
|
| 33 |
|
|
|
|
|
|
|
| 34 |
## Safety notes
|
| 35 |
- The tester form includes an API key field; when the Space is public, advise users not to paste production secrets unless behind auth.
|
| 36 |
- The app itself stores nothing; all calls go from the browser to the user-provided endpoints.
|
|
|
|
| 31 |
- `API_TESTER_HTML` – optional path to a custom HTML tester file (defaults to bundled `api-tester.html`).
|
| 32 |
- `PORT` or `GRADIO_PORT` – port to bind (default 7860).
|
| 33 |
|
| 34 |
+
**Recommended:** set `GRADIO_AUTH` (or `GRADIO_USERNAME`/`GRADIO_PASSWORD`) when running this Space publicly; keys are BYOK and stay in the browser, but auth protects against casual misuse.
|
| 35 |
+
|
| 36 |
## Safety notes
|
| 37 |
- The tester form includes an API key field; when the Space is public, advise users not to paste production secrets unless behind auth.
|
| 38 |
- The app itself stores nothing; all calls go from the browser to the user-provided endpoints.
|