chore(anda_engine_server): support x-api-key

Author: zensh

agents/anda_assistant/src/agent.rs

@@ -210,6 +210,7 @@ impl Agent<AgentCtx> for Assistant {
                     "type": "Person",
                     "name": caller.to_string(),
                     "attributes": {},
+                    "metadata": {},
                 })
             });
 

anda_engine_server/Cargo.toml

@@ -3,7 +3,7 @@ name = "anda_engine_server"
 description = "A http server to serve multiple Anda engines."
 repository = "https://github.com/ldclabs/anda/tree/main/anda_engine_server"
 publish = true
-version.workspace = true
+version = "0.9.3"
 edition.workspace = true
 keywords.workspace = true
 categories.workspace = true

anda_engine_server/src/handler.rs

@@ -26,6 +26,20 @@ pub struct AppState {
     pub(crate) engines: Arc<BTreeMap<Principal, Engine>>,
     pub(crate) default_engine: Principal,
     pub(crate) start_time_ms: u64,
+    pub(crate) api_key: Option<String>,
+}
+
+impl AppState {
+    pub fn check_api_key(&self, headers: &http::HeaderMap) -> Result<(), String> {
+        if let Some(expected_key) = &self.api_key {
+            match headers.get("x-api-key") {
+                Some(provided_key) if provided_key == expected_key => Ok(()),
+                _ => Err("missing or invalid x-api-key in headers".to_string()),
+            }
+        } else {
+            Ok(())
+        }
+    }
 }
 
 /// GET /.well-known/information
@@ -98,6 +112,10 @@ pub async fn anda_engine(
     Path(id): Path<String>,
     ct: ContentWithSHA3<RPCRequest>,
 ) -> impl IntoResponse {
+    if let Err(err) = app.check_api_key(&headers) {
+        return (StatusCode::UNAUTHORIZED, err).into_response();
+    }
+
     let id = if &id == "default" {
         app.default_engine
     } else if let Ok(id) = Principal::from_text(&id) {

anda_engine_server/src/lib.rs

@@ -22,6 +22,7 @@ pub struct ServerBuilder {
     origin: String,
     engines: BTreeMap<Principal, Engine>,
     default_engine: Option<Principal>,
+    api_key: Option<String>,
 }
 
 impl Default for ServerBuilder {
@@ -42,6 +43,7 @@ impl ServerBuilder {
             origin: "https://localhost:8443".to_string(),
             engines: BTreeMap::new(),
             default_engine: None,
+            api_key: None,
         }
     }
 
@@ -98,6 +100,7 @@ impl ServerBuilder {
             engines: Arc::new(self.engines),
             default_engine,
             start_time_ms: unix_ms(),
+            api_key: self.api_key,
         };
         let app = Router::new()
             .route("/", routing::get(get_information))