Add API key authentication support for /api/chat (Bearer or X-API-Key header)

app.py

@@ -61,6 +61,11 @@ def create_access_token(data: dict, expires_delta: Optional[timedelta] = None):
 
 async def get_current_user(credentials: HTTPAuthorizationCredentials = Depends(security)):
     token = credentials.credentials
+    if token.startswith("ollama_"):
+        user = get_user_by_api_key(token)
+        if not user:
+            raise HTTPException(status_code=401, detail="Invalid API key")
+        return user
     try:
         payload = jwt.decode(token, settings.secret_key, algorithms=[settings.algorithm])
         username = payload.get("sub")
@@ -76,6 +81,9 @@ async def get_current_user(credentials: HTTPAuthorizationCredentials = Depends(s
 async def get_user_or_none(request: Request):
     auth = request.headers.get("Authorization", "")
     if not auth.startswith("Bearer "):
+        api_key = request.headers.get("X-API-Key", "")
+        if api_key:
+            return get_user_by_api_key(api_key)
         return None
     try:
         return await get_current_user(HTTPAuthorizationCredentials(scheme="Bearer", credentials=auth[7:]))