Spaces:

Depo23
/

Vtranscript

Sleeping

App Files Files Community

EdiBianco commited on May 28

Commit

4efa1cd

1 Parent(s): 6e9392f

Replace Basic Auth with cookie login form (HF proxy fix)

Browse files

Files changed (1) hide show

app.py +102 -26

app.py CHANGED Viewed

@@ -4,6 +4,8 @@ FastAPI + faster-whisper + yt-dlp
 """
 import asyncio
 import glob
 import json
 import os
 import secrets
@@ -15,9 +17,9 @@ from typing import Optional
 import yt_dlp
 from faster_whisper import WhisperModel
-from fastapi import Depends, FastAPI, File, Form, HTTPException, UploadFile
-from fastapi.responses import StreamingResponse
-from fastapi.security import HTTPBasic, HTTPBasicCredentials
 # ---------------------------------------------------------------------------
 # Config
@@ -25,12 +27,34 @@ from fastapi.security import HTTPBasic, HTTPBasicCredentials
 PASSWORD = os.getenv("APP_PASSWORD", "changeme")
 MAX_UPLOAD_BYTES = 500 * 1024 * 1024  # 500 MB
 WHISPER_MODEL = "base.en"
 # ---------------------------------------------------------------------------
-# App + auth
 # ---------------------------------------------------------------------------
 app = FastAPI()
-security = HTTPBasic()
 executor = ThreadPoolExecutor(max_workers=2)
 _model: Optional[WhisperModel] = None
@@ -46,15 +70,74 @@ def get_model() -> WhisperModel:
     return _model
-def check_auth(credentials: HTTPBasicCredentials = Depends(security)) -> str:
-    ok = secrets.compare_digest(credentials.password.encode(), PASSWORD.encode())
-    if not ok:
-        raise HTTPException(
-            status_code=401,
-            detail="Unauthorized",
-            headers={"WWW-Authenticate": "Basic"},
-        )
-    return credentials.username
 # ---------------------------------------------------------------------------
@@ -107,17 +190,13 @@ def transcribe_file(jid: str, path: str, cleanup_paths: list[str]):
 # ---------------------------------------------------------------------------
 # Routes
 # ---------------------------------------------------------------------------
-@app.get("/", dependencies=[Depends(check_auth)])
 async def index():
-    from fastapi.responses import HTMLResponse
-    return HTMLResponse(HTML)
 @app.post("/transcribe/file")
-async def transcribe_upload(
-    file: UploadFile = File(...),
-    _: str = Depends(check_auth),
-):
     # Size check via content-length header
     size = int(file.headers.get("content-length", 0))
     if size > MAX_UPLOAD_BYTES:
@@ -142,10 +221,7 @@ async def transcribe_upload(
 @app.post("/transcribe/url")
-async def transcribe_url(
-    url: str = Form(...),
-    _: str = Depends(check_auth),
-):
     jid = new_job()
     push(jid, f"Fetching URL: {url}")
@@ -199,7 +275,7 @@ async def transcribe_url(
 @app.get("/progress/{jid}")
-async def progress(jid: str, _: str = Depends(check_auth)):
     if jid not in jobs:
         raise HTTPException(404, "Job not found.")

 """
 import asyncio
 import glob
+import hashlib
+import hmac
 import json
 import os
 import secrets
 import yt_dlp
 from faster_whisper import WhisperModel
+from fastapi import FastAPI, File, Form, Request, UploadFile
+from fastapi.responses import HTMLResponse, RedirectResponse, StreamingResponse
+from starlette.middleware.base import BaseHTTPMiddleware
 # ---------------------------------------------------------------------------
 # Config
 PASSWORD = os.getenv("APP_PASSWORD", "changeme")
 MAX_UPLOAD_BYTES = 500 * 1024 * 1024  # 500 MB
 WHISPER_MODEL = "base.en"
+COOKIE_NAME = "auth"
+_SECRET = os.urandom(32)  # ephemeral signing key
 # ---------------------------------------------------------------------------
+# Auth helpers
+# ---------------------------------------------------------------------------
+def _make_token(pw: str) -> str:
+    return hmac.new(_SECRET, pw.encode(), hashlib.sha256).hexdigest()
+def _is_authed(request: Request) -> bool:
+    token = request.cookies.get(COOKIE_NAME, "")
+    return secrets.compare_digest(token, _make_token(PASSWORD))
+class AuthMiddleware(BaseHTTPMiddleware):
+    async def dispatch(self, request: Request, call_next):
+        if request.url.path in ("/login",):
+            return await call_next(request)
+        if not _is_authed(request):
+            return RedirectResponse("/login", status_code=302)
+        return await call_next(request)
+# ---------------------------------------------------------------------------
+# App
 # ---------------------------------------------------------------------------
 app = FastAPI()
+app.add_middleware(AuthMiddleware)
 executor = ThreadPoolExecutor(max_workers=2)
 _model: Optional[WhisperModel] = None
     return _model
+# ---------------------------------------------------------------------------
+# Login routes
+# ---------------------------------------------------------------------------
+LOGIN_HTML = """<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>VOD Transcriber — Login</title>
+<style>
+  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+  body {
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+    background: #0f0f11; color: #e2e2e5;
+    min-height: 100vh; display: flex; align-items: center; justify-content: center;
+  }
+  .card {
+    background: #1a1a1f; border: 1px solid #2a2a32; border-radius: 16px;
+    padding: 2.5rem; width: 100%; max-width: 360px;
+    box-shadow: 0 8px 40px rgba(0,0,0,0.4);
+  }
+  h1 { font-size: 1.2rem; font-weight: 600; color: #fff; margin-bottom: 0.3rem; }
+  .sub { font-size: 0.82rem; color: #555; margin-bottom: 2rem; }
+  label { display: block; font-size: 0.78rem; font-weight: 500; color: #888; margin-bottom: 0.4rem; text-transform: uppercase; letter-spacing: 0.05em; }
+  input[type="password"] {
+    width: 100%; background: #111115; border: 1px solid #2a2a32; border-radius: 10px;
+    padding: 0.7rem 1rem; font-size: 0.9rem; color: #e2e2e5; outline: none;
+    margin-bottom: 1rem; transition: border-color 0.15s;
+  }
+  input[type="password"]:focus { border-color: #5b5bf6; }
+  button {
+    width: 100%; background: #5b5bf6; color: #fff; border: none; border-radius: 10px;
+    padding: 0.75rem; font-size: 0.95rem; font-weight: 600; cursor: pointer;
+    transition: background 0.15s;
+  }
+  button:hover { background: #4a4ae0; }
+  .err { color: #f66; font-size: 0.82rem; margin-top: 0.75rem; display: none; }
+  .err.visible { display: block; }
+</style>
+</head>
+<body>
+<div class="card">
+  <h1>VOD Transcriber</h1>
+  <p class="sub">Enter password to continue</p>
+  <form method="POST" action="/login">
+    <label for="pw">Password</label>
+    <input type="password" id="pw" name="password" autofocus autocomplete="current-password">
+    <button type="submit">Sign in</button>
+  </form>
+  <p class="err {err_class}">{err_msg}</p>
+</div>
+</body>
+</html>"""
+@app.get("/login", response_class=HTMLResponse)
+async def login_page():
+    return LOGIN_HTML.replace("{err_class}", "").replace("{err_msg}", "")
+@app.post("/login")
+async def login(password: str = Form(...)):
+    if secrets.compare_digest(password.encode(), PASSWORD.encode()):
+        resp = RedirectResponse("/", status_code=302)
+        resp.set_cookie(COOKIE_NAME, _make_token(PASSWORD), httponly=True, samesite="lax")
+        return resp
+    html = LOGIN_HTML.replace("{err_class}", "visible").replace("{err_msg}", "Incorrect password.")
+    return HTMLResponse(html, status_code=401)
 # ---------------------------------------------------------------------------
 # ---------------------------------------------------------------------------
 # Routes
 # ---------------------------------------------------------------------------
+@app.get("/", response_class=HTMLResponse)
 async def index():
+    return HTML
 @app.post("/transcribe/file")
+async def transcribe_upload(file: UploadFile = File(...)):
     # Size check via content-length header
     size = int(file.headers.get("content-length", 0))
     if size > MAX_UPLOAD_BYTES:
 @app.post("/transcribe/url")
+async def transcribe_url(url: str = Form(...)):
     jid = new_job()
     push(jid, f"Fetching URL: {url}")
 @app.get("/progress/{jid}")
+async def progress(jid: str):
     if jid not in jobs:
         raise HTTPException(404, "Job not found.")