Update server.py

server.py

@@ -405,9 +405,19 @@ def image_to_base64(image: Image, quality: int = 75) -> str:
     image.save(buffer, format="JPEG", quality=quality)
     img_str = base64.b64encode(buffer.getvalue()).decode("utf-8")
     return img_str
+    
+ignore_auth = []    
 
 api_key = os.environ.get("password")
 
+def is_authorize_ignored(request):
+    view_func = app.view_functions.get(request.endpoint)
+
+    if view_func is not None:
+        if view_func in ignore_auth:
+            return True
+    return False
+
 @app.before_request
 def before_request():
     # Request time measuring
@@ -416,14 +426,14 @@ def before_request():
     # Checks if an API key is present and valid, otherwise return unauthorized
     # The options check is required so CORS doesn't get angry
     try:
-        if request.method != 'OPTIONS' and request.authorization.token != api_key:
+        if request.method != 'OPTIONS' and is_authorize_ignored(request) == False and getattr(request.authorization, 'token', '') != api_key:
             print(f"WARNING: Unauthorized API key access from {request.remote_addr}")
             response = jsonify({ 'error': '401: Invalid API key' })
             response.status_code = 401
             return response
     except Exception as e:
         print(f"API key check error: {e}")
-        return "401 Unauthorized\n{}\n\n".format(e), 401
+        return "this space is only for doctord98 you can duplicate and make your own".format(e),
 
 
 @app.after_request
@@ -840,5 +850,5 @@ def chromadb_import():
 
     return jsonify({"count": len(ids)})
 
-
+ignore_auth.append(tts_play_sample)
 app.run(host=host, port=port)