feat(auth): login to Hugging Face Hub via HUGGINGFACE_HUB_TOKEN; set HF_TOKEN/TOKEN; default OMP_NUM_THREADS=1

api_server.py

@@ -16,6 +16,7 @@ from fastapi.responses import FileResponse, StreamingResponse, JSONResponse
 import logging
 from logging.handlers import BufferingHandler
 from firebase_app_check import verify_app_check_token, verify_firebase_id_token
+from huggingface_hub import login as hf_login
 
 # Import face swap functionality
 import sys
@@ -30,6 +31,20 @@ app = FastAPI(title="Face Swap Video API", version="1.0.0")
 API_PASSWORD = os.getenv("API_PASSWORD", "logicgo_videoswap@153")
 security = HTTPBearer()
 
+# Authenticate Hugging Face Hub for model downloads (private/rate-limited)
+_hf_token = os.getenv("HUGGINGFACE_HUB_TOKEN") or os.getenv("HF_TOKEN")
+if _hf_token:
+    try:
+        hf_login(token=_hf_token)  # nosec - token provided via env
+    except Exception:
+        pass
+    # Also expose legacy env names some utils expect
+    os.environ.setdefault("HF_TOKEN", _hf_token)
+    os.environ.setdefault("TOKEN", _hf_token)
+
+# Ensure sane threads to avoid libgomp warnings
+os.environ.setdefault("OMP_NUM_THREADS", "1")
+
 def verify_api_key(credentials: HTTPAuthorizationCredentials = Security(security)):
     """Verify API key from Bearer token.