update

.gitignore

@@ -6,6 +6,7 @@ examples/sales_agent_bedrock.ipynb
 
 *.log
 **.env
+.env.fe
 .DS_Store
 **__pycache__
 /scratch

docker-compose.yml

@@ -8,7 +8,9 @@ services:
       - ./frontend:/usr/src/app
     container_name: frontend
     environment:
-      - NEXT_PUBLIC_API_URL_OLD=http://localhost:8000
+      - NEXT_PUBLIC_API_URL=http://localhost:8000
+    env_file:  # Added line for specifying an environment file
+      - .env.fe  # Specifying the .env.fe file
     ports:
       - "3000:3000"
     depends_on:

frontend/src/components/chat-interface.tsx

@@ -80,8 +80,12 @@ export function ChatInterface() {
     const fetchBotName = async () => {
       console.log("REACT_APP_API_URL:", process.env.NEXT_PUBLIC_API_URL); // Added console logging for debugging
       try {
-        const response = await fetch(`${process.env.NEXT_PUBLIC_API_URL}/botname`);
-
+        const response = await fetch(`${process.env.NEXT_PUBLIC_API_URL}/botname`, {
+          method: 'GET', // Method is optional since GET is the default value
+          headers: {
+            'Authorization': `Bearer ${process.env.NEXT_PUBLIC_AUTH_KEY}`
+          },
+        });
         if (!response.ok) {
           throw new Error(`Network response was not ok: ${response.statusText}`);
         }
@@ -124,6 +128,7 @@ export function ChatInterface() {
         method: 'POST',
         headers: {
           'Content-Type': 'application/json',
+          'Authorization': `Bearer ${process.env.NEXT_PUBLIC_AUTH_KEY}`
         },
         body: JSON.stringify(requestData),
       });

run_api.py

@@ -31,6 +31,18 @@
     allow_headers=["*"],
 )
 
+from fastapi import Header, HTTPException, Depends
+
+class AuthenticatedResponse(BaseModel):
+    message: str
+
+def get_auth_key(authorization: str = Header(...)) -> None:
+    auth_key = os.getenv("AUTH_KEY")
+    if not auth_key:
+        raise HTTPException(status_code=500, detail="AUTH_KEY not configured")
+    expected_header = f"Bearer {auth_key}"
+    if authorization != expected_header:
+        raise HTTPException(status_code=401, detail="Unauthorized")
 
 @app.get("/")
 async def say_hello():
@@ -45,9 +57,10 @@ class MessageList(BaseModel):
 sessions = {}
 
 
-@app.get("/botname")
-async def get_bot_name():
+@app.get("/botname", response_model=None)
+async def get_bot_name(authorization: str = Header(...)):
     load_dotenv()
+    get_auth_key(authorization)
     sales_api = SalesGPTAPI(
         config_path=os.getenv("CONFIG_PATH", "examples/example_agent_setup.json"),
         product_catalog=os.getenv(
@@ -61,7 +74,7 @@ async def get_bot_name():
 
 
 @app.post("/chat")
-async def chat_with_sales_agent(req: MessageList, stream: bool = Query(False)):
+async def chat_with_sales_agent(req: MessageList, stream: bool = Query(False), authorization: str = Header(...)):
     """
     Handles chat interactions with the sales agent.
 
@@ -78,6 +91,7 @@ async def chat_with_sales_agent(req: MessageList, stream: bool = Query(False)):
         Streaming functionality is planned but not yet available. The current implementation only supports synchronous responses.
     """
     sales_api = None
+    get_auth_key(authorization)
     # print(f"Received request: {req}")
     if req.session_id in sessions:
         print("Session is found!")