Can I use auth to llmspy just API KEY?

[djonik1562]

Hello.
Can I use to auth to llmspy just predefined, in config API_KEY?
I think it is easier then github oauth for individual using.

[mythz]

Do you mean you just want a single token like an API_KEY to protect access to the Web UI + APIs?

A stateless API_KEY isn't a great UX since it shouldn't be persisted in localStorage and if you (F5) refresh the page you'd need to enter it in again. An Admin password would be better since we can use cookies to establish a sticky session which lasts until the server restarts. and if we're going to support credentials auth may as well support multiple static user:pass in a passwd file.

I'll leave it open as a feature request.

[djonik1562]

Do you mean you just want a single token like an API_KEY to protect access to the Web UI + APIs?

Yes, I meant exactly API_KEY to protect especially API. I want to use your llms in my VPS server, and want to protect API, that anybody couldn't use my quotas.
For Web UI login and password it is normal idea.

[mythz]

An API_KEY implies a stateless token that's sent on every request, which doesn't work well in Web UIs unless you're willing to persist it in localStorage - making it vulnerable to XSS attacks, and thus not recommended. Web UIs typically use cookies to establish sticky server sessions which survive page reloads.

Currently GitHub OAuth is the only supported Auth Provider, which can be further restricted to specified users. It has recently been refactored into a separate github_auth extension to make it easier to support multiple auth providers. Someone is looking at adding OIDC support which hopefully they'll be able to contribute.

I'll keep this issue open as an open feature request to add simple credential auth support. Currently working on a couple of major features atm, will look at this after.