From d07397c81e3324d21094c3f678edb5904d61fe9f Mon Sep 17 00:00:00 2001 From: samit Date: Sat, 28 Feb 2026 01:17:43 -0800 Subject: [PATCH 1/2] added auth to dataset endpopints --- studio/backend/routes/datasets.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/studio/backend/routes/datasets.py b/studio/backend/routes/datasets.py index cb1ea75e33..a53e223015 100644 --- a/studio/backend/routes/datasets.py +++ b/studio/backend/routes/datasets.py @@ -5,7 +5,7 @@ import base64 import io import sys from pathlib import Path -from fastapi import APIRouter, HTTPException +from fastapi import APIRouter, Depends, HTTPException import logging # Add backend directory to path @@ -15,6 +15,7 @@ if str(backend_path) not in sys.path: # Import dataset utilities from utils.datasets import check_dataset_format +from auth.authentication import get_current_subject router = APIRouter() logger = logging.getLogger(__name__) @@ -84,7 +85,10 @@ DATA_EXTS = ( @router.post("/check-format", response_model=CheckFormatResponse) -def check_format(request: CheckFormatRequest): +def check_format( + request: CheckFormatRequest, + current_subject: str = Depends(get_current_subject), +): """ Check if a dataset requires manual column mapping. From ece51dca1381bcd17a948f3d8ab2445c1032ff96 Mon Sep 17 00:00:00 2001 From: samit Date: Sat, 28 Feb 2026 02:10:12 -0800 Subject: [PATCH 2/2] updated fetch to auth fetch in the frontend --- studio/frontend/src/features/training/api/datasets-api.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/studio/frontend/src/features/training/api/datasets-api.ts b/studio/frontend/src/features/training/api/datasets-api.ts index 7bba75ca38..b2348abed8 100644 --- a/studio/frontend/src/features/training/api/datasets-api.ts +++ b/studio/frontend/src/features/training/api/datasets-api.ts @@ -1,3 +1,4 @@ +import { authFetch } from "@/features/auth"; import type { CheckFormatResponse } from "../types/datasets"; type CheckDatasetFormatArgs = { @@ -15,7 +16,7 @@ export async function checkDatasetFormat({ split, isVlm, }: CheckDatasetFormatArgs): Promise { - const res = await fetch("/api/datasets/check-format", { + const res = await authFetch("/api/datasets/check-format", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({