Add authorization to the project

.env

@@ -0,0 +1,3 @@
+SECRET_KEY=your-secret-key-here
+ALGORITHM=HS256
+ACCESS_TOKEN_EXPIRE_MINUTES=30

auth/auth_bearer.py

@@ -0,0 +1,30 @@
+from fastapi import Request, HTTPException
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+
+from auth.auth_handler import decode_token
+
+class JWTBearer(HTTPBearer):
+    def __init__(self, auto_error: bool = True):
+        super(JWTBearer, self).__init__(auto_error=auto_error)
+
+    async def __call__(self, request: Request):
+        credentials: HTTPAuthorizationCredentials = await super(JWTBearer, self).__call__(request)
+        if credentials:
+            if not credentials.scheme == "Bearer":
+                raise HTTPException(status_code=403, detail="Invalid authentication scheme.")
+            if not self.verify_jwt(credentials.credentials):
+                raise HTTPException(status_code=403, detail="Invalid token or expired token.")
+            return credentials.credentials
+        else:
+            raise HTTPException(status_code=403, detail="Invalid authorization code.")
+
+    def verify_jwt(self, jwtoken: str) -> bool:
+        isTokenValid: bool = False
+
+        try:
+            payload = decode_token(jwtoken)
+        except:
+            payload = None
+        if payload:
+            isTokenValid = True
+        return isTokenValid

auth/auth_handler.py

@@ -0,0 +1,26 @@
+from datetime import datetime, timedelta
+from typing import Optional
+
+from jose import JWTError, jwt
+from passlib.context import CryptContext
+
+from schemas.auth import TokenData
+from config import settings
+
+pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+
+SECRET_KEY = settings.SECRET_KEY
+ALGORITHM = settings.ALGORITHM
+ACCESS_TOKEN_EXPIRE_MINUTES = settings.ACCESS_TOKEN_EXPIRE_MINUTES
+
+def decode_token(token: str):
+    try:
+        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+        username: str = payload.get("sub")
+        user_id: str = payload.get("user_id")
+        if username is None and user_id is None:
+            return None
+        token_data = TokenData(username=username, user_id=user_id)
+    except JWTError:
+        return None
+    return token_data

config.py

@@ -0,0 +1,11 @@
+from pydantic_settings import BaseSettings
+
+class Settings(BaseSettings):
+    SECRET_KEY: str
+    ALGORITHM: str
+    ACCESS_TOKEN_EXPIRE_MINUTES: int
+
+    class Config:
+        env_file = ".env"
+
+settings = Settings()

main.py

@@ -717,8 +717,8 @@ class HealthcareChatbot:
         print(f"🔗 Making API call to {endpoint_method} {self.BASE_URL + endpoint_url} with params: {endpoint_params}")
         
         # Inject patient_id if needed
-        if 'patient_id' in endpoint_params:
-            endpoint_params['patient_id'] = self.user_id
+        # if 'patient_id' in endpoint_params:
+        #     endpoint_params['patient_id'] = self.user_id
         
         retries = 0
         response = None
@@ -810,10 +810,10 @@ class HealthcareChatbot:
             #             router_data['params'][param] = parsed_date
             
             # Inject patient_id if needed
-            if 'patient_id' in router_data['params']:
-                router_data['params']['patient_id'] = self.user_id
-            else:
-                router_data['params']['patient_id'] = self.user_id
+            # if 'patient_id' in router_data['params']:
+            #     router_data['params']['patient_id'] = self.user_id
+            # else:
+            #     router_data['params']['patient_id'] = self.user_id
             
             
             print(f"🔍 Final API call data: {router_data}")
@@ -1073,11 +1073,12 @@ class HealthcareChatbot:
 # if __name__ == "__main__":
 #     main()
 
-from fastapi import FastAPI, HTTPException, UploadFile, File
+from fastapi import FastAPI, HTTPException, UploadFile, File, Depends
 from pydantic import BaseModel
 from typing import Dict, Any, Optional
 from fastapi.middleware.cors import CORSMiddleware
-
+from auth.auth_handler import decode_token
+from auth.auth_bearer import JWTBearer
 
 
 app = FastAPI(
@@ -1099,23 +1100,37 @@ class QueryRequest(BaseModel):
     query: str
 
 
-@app.post("/query")
-async def process_query(request: QueryRequest):
+@app.post("/query", dependencies=[Depends(JWTBearer())])
+async def process_query(request: QueryRequest, token: str = Depends(JWTBearer())):
     """
     Process a user query and return a response
     """
     try:
+        token_data = decode_token(token)
+        print(f"🔑 Token data: {token_data}")
+        agent.user_id = token_data.user_id
+        agent.headers = {
+            "Authorization": f"Bearer {token}",
+            "Content-Type": "application/json",
+        }
         response = agent.chat(request.query).message
         return response
     except Exception as e:
         raise HTTPException(status_code=500, detail=str(e))
 
-@app.post("/voice-text")
-async def process_voice(file: UploadFile = File(...)):
+@app.post("/voice-text", dependencies=[Depends(JWTBearer())])
+async def process_voice(file: UploadFile = File(...), token: str = Depends(JWTBearer())):
     """
     Process a user voice and return a response
     """
     try:
+        token_data = decode_token(token)
+        print(f"🔑 Token data: {token_data}")
+        agent.user_id = token_data.user_id
+        agent.headers = {
+            "Authorization": f"Bearer {token}",
+            "Content-Type": "application/json",
+        }
         audio_bytes = await file.read()
         audio_numpy = load_audio(audio_bytes)
         text_response = voice_to_text_model.transcribe(audio_numpy, fp16=False)

schemas/auth.py

@@ -0,0 +1,9 @@
+from pydantic import BaseModel
+
+class Token(BaseModel):
+    access_token: str
+    token_type: str
+
+class TokenData(BaseModel):
+    username: str | None = None
+    user_id: str | None = None