feat: restrict aksk auth on content gen methods

Author: xaviergoh-bytedance

volcenginesdkarkruntime/_utils/_utils.py

@@ -87,4 +87,18 @@ def _insert_sts_token(args, kwargs):
     elif ark_client.api_key is None and model and model.startswith("bot-") and ark_client.ak and ark_client.sk:
         default_auth_header = {"Authorization": "Bearer " + ark_client._get_bot_sts_token(model)}
         extra_headers = kwargs.get("extra_headers") if kwargs.get("extra_headers") else {}
-        kwargs["extra_headers"] = {**default_auth_header, **extra_headers}
+        kwargs["extra_headers"] = {**default_auth_header, **extra_headers}
+
+
+def disallow_aksk(func):
+    def wrapper(*args, **kwargs):
+        _restrict_aksk(args, kwargs)
+        return func(*args, **kwargs)
+
+    return wrapper
+
+def _restrict_aksk(args, kwargs):
+    assert len(args) > 0
+
+    ark_client = args[0]._client
+    assert ark_client.api_key is not None, "ak&sk authentication is currently not supported for this method, please use api key instead"

volcenginesdkarkruntime/resources/content_generation/tasks.py

@@ -4,6 +4,7 @@
 import httpx
 
 from ..._types import Body, Query, Headers
+from ..._utils._utils import disallow_aksk
 from ...types.content_generation.content_generation_task import ContentGenerationTask
 from ...types.content_generation.content_generation_task_id import ContentGenerationTaskID
 from volcenginesdkarkruntime._base_client import make_request_options
@@ -13,6 +14,8 @@
 
 
 class Tasks(SyncAPIResource):
+
+    @disallow_aksk
     def create(
             self,
             *,
@@ -39,7 +42,7 @@ def create(
         )
         return resp
 
-
+    @disallow_aksk
     def get(
             self,
             *,
@@ -61,6 +64,7 @@ def get(
         )
         return resp
 
+    @disallow_aksk
     def list(
             self,
             page_num: int | None = None,
@@ -102,6 +106,7 @@ def list(
         )
         return resp
 
+    @disallow_aksk
     def delete(
             self,
             task_id: str,