81778a2c2d
The API key is no longer sent as plaintext in HTTP responses. Instead, the frontend performs a reveal handshake: fetches the server's RSA public key, generates a session AES-256 key, RSA-OAEP wraps it, and the server returns the API key encrypted with AES-GCM. This protects the bearer token even when Studio is served over plain HTTP.
18 lines
294 B
Text
18 lines
294 B
Text
# Studio UI backend dependencies
|
|
typer
|
|
fastapi
|
|
uvicorn
|
|
pydantic
|
|
matplotlib
|
|
pandas
|
|
nest_asyncio
|
|
datasets==4.3.0
|
|
pyjwt
|
|
easydict
|
|
addict
|
|
# gradio>=4.0.0 # 148 MB - Studio uses React + FastAPI, not Gradio
|
|
huggingface-hub==0.36.2
|
|
structlog>=24.1.0
|
|
diceware
|
|
ddgs
|
|
cryptography>=42.0.0
|