feat: add bearer token to the api and fix the docs

README.md

@@ -47,16 +47,37 @@ Build and run the container:
 
 ```bash
 docker build -t imagebind-api .
-docker run -p 8000:8000 imagebind-api
+docker run -p 7860:7860 imagebind-api
 ```
 
 ## API Endpoints
 
-The API will be available at `http://localhost:8000` with the following endpoints:
+The API will be available at `http://localhost:7860` with the following endpoints:
 
 - POST `/compute_embeddings`: Generate embeddings for images, audio files, and text
 - POST `/compute_similarities`: Compute similarities between embeddings
 
-For detailed API documentation, visit `http://localhost:8000/docs`
+For detailed API documentation, visit `http://localhost:7860/docs`
 
 Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+
+## API Authentication
+
+The API uses Bearer token authentication. You need to include an authorization header with your API token in all requests:
+
+```bash
+# Set your API token as an environment variable
+export API_TOKEN="your-api-token-here"
+
+# Example curl request with authentication
+curl -X POST "http://localhost:7860/compute_embeddings" \
+     -H "Authorization: Bearer ${API_TOKEN}" \
+     -H "Content-Type: multipart/form-data" \
+     -F "texts=example text"
+```
+
+When running the Docker container, you can set the API token as an environment variable:
+
+```bash
+docker run -p 7860:7860 -e API_TOKEN="your-api-token-here" imagebind-api
+```

main.py

@@ -10,9 +10,25 @@ import tempfile
 from pydantic import BaseModel
 import uvicorn
 import numpy as np
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+from fastapi import Depends, HTTPException, status
 
 app = FastAPI()
 
+# Add these lines after the app initialization
+security = HTTPBearer()
+API_TOKEN = os.getenv("API_TOKEN", "your-default-token-here")  # Set a default token or use environment variable
+
+# Add this function for token verification
+async def verify_token(credentials: HTTPAuthorizationCredentials = Depends(security)):
+    if credentials.credentials != API_TOKEN:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Invalid authentication token",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+    return credentials.credentials
+
 def convert_audio_to_wav(audio_path: str) -> str:
     """Convert MP3 to WAV if necessary."""
     if audio_path.lower().endswith('.mp3'):
@@ -108,6 +124,7 @@ class SimilarityResponse(BaseModel):
 
 @app.post("/compute_embeddings", response_model=EmbeddingResponse)
 async def generate_embeddings(
+    credentials: HTTPAuthorizationCredentials = Depends(verify_token),
     texts: str | None = Form(None),
     images: List[UploadFile] | None = File(default=None),
     audio_files: List[UploadFile] | None = File(default=None)
@@ -184,13 +201,18 @@ async def generate_embeddings(
                 pass
 
 @app.post("/compute_similarities", response_model=SimilarityResponse)
-async def compute_similarities(embeddings: Dict[str, List[List[float]]]):
+async def compute_similarities(
+    embeddings: Dict[str, List[List[float]]],
+    credentials: HTTPAuthorizationCredentials = Depends(verify_token)
+):
     """Compute similarities from provided embeddings."""
     similarities = embedding_manager.compute_similarities(embeddings)
     return SimilarityResponse(similarities=similarities)
 
 @app.get("/health")
-async def health_check():
+async def health_check(
+    credentials: HTTPAuthorizationCredentials = Depends(verify_token)
+):
     """Basic healthcheck endpoint that returns the status of the service."""
     return {
         "status": "healthy",
@@ -198,4 +220,4 @@ async def health_check():
     }
 
 if __name__ == "__main__":
-    uvicorn.run(app, host="0.0.0.0", port=8000) 
+    uvicorn.run(app, host="0.0.0.0", port=7860)