Update server.py

server.py

@@ -416,23 +416,10 @@ def image_to_base64(image: Image, quality: int = 75) -> str:
     img_str = base64.b64encode(buffer.getvalue()).decode("utf-8")
     return img_str
 
-ignore_auth = []
-# Reads an API key from an already existing file. If that file doesn't exist, create it.
-if args.secure:
-    try:
-        with open("api_key.txt", "r") as txt:
-            api_key = txt.read().replace('\n', '')
-    except:
-        api_key = secrets.token_hex(5)
-        with open("api_key.txt", "w") as txt:
-            txt.write(api_key)
-
-    print(f"Your API key is {api_key}")
-elif args.share and args.secure != True:
-    print("WARNING: This instance is publicly exposed without an API key! It is highly recommended to restart with the \"--secure\" argument!")
-else:
-    print("No API key given because you are running locally.")
 
+ignore_auth = []    
+# Hugging Face, Get password instead of text file.
+api_key = os.environ.get("password")
 
 def is_authorize_ignored(request):
     view_func = app.view_functions.get(request.endpoint)
@@ -442,7 +429,6 @@ def is_authorize_ignored(request):
             return True
     return False
 
-
 @app.before_request
 def before_request():
     # Request time measuring
@@ -451,14 +437,16 @@ def before_request():
     # Checks if an API key is present and valid, otherwise return unauthorized
     # The options check is required so CORS doesn't get angry
     try:
-        if request.method != 'OPTIONS' and args.secure and is_authorize_ignored(request) == False and getattr(request.authorization, 'token', '') != api_key:
+        if request.method != 'OPTIONS' and is_authorize_ignored(request) == False and getattr(request.authorization, 'token', '') != api_key:
             print(f"WARNING: Unauthorized API key access from {request.remote_addr}")
+            if request.method == 'POST':
+                print(f"Incoming POST request with {request.headers.get('Authorization')}")
             response = jsonify({ 'error': '401: Invalid API key' })
             response.status_code = 401
-            return response
+            return "https://(hf_name)-(space_name).hf.space/"
     except Exception as e:
         print(f"API key check error: {e}")
-        return "401 Unauthorized\n{}\n\n".format(e), 401
+        return "https://(hf_name)-(space_name).hf.space/"
 
 
 @app.after_request