API keys

[ondraasek]

Hello, I just installed webui and activated api.
I user parameters like --share --gradio-auth --api, but at localhost/docs it doesnt want API keys or something, anyone can do API requests.
Is possible to add somewhere apikey or something like bearer?
Thanks a lot

[ondraasek]

nvm --apiauth username:password worked, just found it with Google. Hopefully it will help someone :)

[yang657008145]

请问这个命令在哪里执行啊

[lasermines]

https://github.com/AUTOMATIC1111/stable-diffusion-webui/wiki/Command-Line-Arguments-and-Settings

[BrofessorNFT]

if it is helpful to someone the request structure on python is requests.post(url=f'{URL}/sdapi/v1/txt2img', json=payload, auth=('user', 'password'))

[Kilvoctu]

The alternative that I like to do is write a function something like

def authenticate():
    s = requests.Session()
    s.auth = ('user', 'pass')
    return s

Then any time you need to post or get, do s = authenticate_user() and all the requests afterward will be authenticated. Example:

s = authenticate_user()

s.get(url + "/sdapi/v1/sd-models")
s.get(url + "/sdapi/v1/samplers")
s.get(url + "/sdapi/v1/prompt-styles")
s.get(url + "/sdapi/v1/face-restorers")
s.get(url + "/sdapi/v1/embeddings")
s.get(url + "/sdapi/v1/hypernetworks")
s.get(url + "/sdapi/v1/upscalers")
s.post(url=f'{url + "/sdapi/v1/options", json=model_payload)
s.post(url=f'{url + "/sdapi/v1/txt2img", json=payload)

Either way works, but i find this to be a bit cleaner.

[pedaraf]

hi guys. actually i can use the code --api-auth username:password in webui-user.bat arguments, but when i want to use the set api_key in my flutter app code I cant really figure it out. Do you know the proper format to put the api key user and password as a query in an http call of an A1111 endpoint?

[mirabarukaso]

Found this place while looking up information and was curious why no one wanted to respond to this simple question.

set COMMANDLINE_ARGS= --xformers --no-half-vae --api --api-auth user:pass --nowebui --port 58189

// const auth = 'user:pass';

            let headers = {};
            if (auth?.includes(':')) {
                const encoded = Buffer.from(auth).toString('base64');
                headers['Authorization'] = `Basic ${encoded}`;
            }

            let request = net.request({
                method: 'POST',
                url: apiUrl,
                headers: headers,
                timeout: this.timeout,
            });