d

README.md

@@ -11,6 +11,7 @@ hf_oauth_scopes:
   - write-repos
   - contribute-repos
   - manage-repos
+  - inference-api
   - jobs
   - write-discussions
 ---
@@ -51,10 +52,8 @@ ANTHROPIC_API_KEY=<one-key-to-rule-them-all>
 HF_TOKEN=<hf-token-to-access-the-hub>
 GITHUB_TOKEN=<gh-pat-key-for-not-reinventing-the-wheel>
 HF_NAMESPACE=<hf-namespace-to-use>
-HF_OAUTH_ORG_ID=<org-id-for-oauth-org-access>
 ```
 
-
 ## Architecture
 
 ### Component Overview

backend/routes/auth.py

@@ -10,11 +10,10 @@ import time
 from urllib.parse import urlencode
 
 import httpx
+from dependencies import AUTH_ENABLED, get_current_user
 from fastapi import APIRouter, Depends, HTTPException, Request
 from fastapi.responses import RedirectResponse
 
-from dependencies import AUTH_ENABLED, get_current_user
-
 router = APIRouter(prefix="/auth", tags=["auth"])
 
 # OAuth configuration from environment
@@ -71,12 +70,10 @@ async def oauth_login(request: Request) -> RedirectResponse:
         "scope": "openid profile",
         "response_type": "code",
         "state": state,
+        "orgIds": os.environ.get(
+            "HF_OAUTH_ORG_ID", "698dbf55845d85df163175f1"
+        ),  # ml-agent-explorers
     }
-    # Request access to org resources (jobs, repos) so the user's token
-    # is scoped to the org.
-    org_id = os.environ.get("HF_OAUTH_ORG_ID", "698dbf55845d85df163175f1")  # ml-agent-explorers
-    if org_id:
-        params["orgIds"] = org_id
     auth_url = f"{OPENID_PROVIDER_URL}/oauth/authorize?{urlencode(params)}"
 
     return RedirectResponse(url=auth_url)