mirror of
https://github.com/invariantlabs-ai/invariant-gateway.git
synced 2026-05-22 14:59:41 +02:00
Hemang
53 lines
2.3 KiB
Python
53 lines
2.3 KiB
Python
"""Common Authorization functions used in the gateway."""
|
|
|
|
from typing import Tuple, Optional
|
|
from fastapi import HTTPException, Request
|
|
|
|
INVARIANT_AUTHORIZATION_HEADER = "invariant-authorization"
|
|
API_KEYS_SEPARATOR = ";invariant-auth="
|
|
|
|
|
|
def extract_authorization_from_headers(
|
|
request: Request, dataset_name: Optional[str], llm_provider_api_key_header: str
|
|
) -> Tuple[str, str]:
|
|
"""
|
|
Extracts the Invariant authorization and LLM Provider API key from the request headers.
|
|
|
|
In case the user wants to push to Explorer (when dataset_name is not None),
|
|
the request headers must contain the Invariant API Key.
|
|
The invariant-authorization header contains the Invariant API Key as
|
|
"invariant-authorization": "Bearer <Invariant API Key>"
|
|
{llm_provider_api_key_header} contains the LLM Provider API Key as
|
|
{llm_provider_api_key_header}: "<API Key>"
|
|
|
|
For some clients, it is not possible to pass a custom header
|
|
In such cases, the Invariant API Key is passed as part of the
|
|
{llm_provider_api_key_header} with the LLM Provider API Key
|
|
The header in that case becomes:
|
|
{llm_provider_api_key_header}: "<API Key>;invariant-auth=<Invariant API Key>"
|
|
"""
|
|
invariant_authorization = request.headers.get(INVARIANT_AUTHORIZATION_HEADER)
|
|
llm_provider_api_key = request.headers.get(llm_provider_api_key_header)
|
|
if dataset_name:
|
|
if invariant_authorization is None:
|
|
if llm_provider_api_key is None:
|
|
raise HTTPException(
|
|
status_code=400, detail="Missing LLM Provider API Key"
|
|
)
|
|
|
|
if API_KEYS_SEPARATOR not in llm_provider_api_key:
|
|
raise HTTPException(status_code=400, detail="Missing invariant api key")
|
|
|
|
# Both the API keys are passed in the llm_provider_api_key_header
|
|
api_keys = request.headers.get(llm_provider_api_key_header).split(
|
|
API_KEYS_SEPARATOR
|
|
)
|
|
if len(api_keys) != 2 or not api_keys[1].strip():
|
|
raise HTTPException(
|
|
status_code=400, detail="Invalid API Key format"
|
|
)
|
|
|
|
invariant_authorization = f"Bearer {api_keys[1].strip()}"
|
|
llm_provider_api_key = f"{api_keys[0].strip()}"
|
|
return invariant_authorization, llm_provider_api_key
|