unsloth/studio/backend
danielhanchen ca7e0cb527 Send the HF token as a header, not a URL query param
The model config, vision-check, and embedding-check requests appended the
Hugging Face token as ?hf_token=..., which leaks it into server access logs,
proxy logs, and browser history for gated/private models. Send it via the
existing X-Unsloth-HF-Token header (hubTokenHeader) instead, and read it on the
backend through the standard get_hf_token dependency, matching the picker's
template routes. Also drop two catch-block comments that just restated the code.
2026-07-17 13:38:07 +00:00
..
assets Add DeepSeek-V4-Flash-GGUF to Studio with none/high/max reasoning (#6908) 2026-07-07 06:13:43 -07:00
auth Studio: make the Cloudflare tunnel opt-in (off by default) (#7046) 2026-07-15 06:13:25 -07:00
core don't kill live llama-servers when a new Studio instance starts (#7182) 2026-07-16 20:24:05 -03:00
hub Feat/model picker per model config (#6647) 2026-07-17 06:08:01 -07:00
loggers Studio: quiet noisy logs, log real progress, and speed up Windows/macOS dataset prep (#7087) 2026-07-15 06:49:52 -07:00
models Studio: make the Cloudflare tunnel opt-in (off by default) (#7046) 2026-07-15 06:13:25 -07:00
picker Feat/model picker per model config (#6647) 2026-07-17 06:08:01 -07:00
plugins Reduce and tighten code comments and docstrings repo-wide (#6095) 2026-06-08 23:09:51 -07:00
requirements Studio: exclude mlx-lm 0.31.3 (broke gemma4/qwen3_5 QK-norm load on Apple Silicon) (#6803) 2026-07-06 19:40:06 -07:00
routes Send the HF token as a header, not a URL query param 2026-07-17 13:38:07 +00:00
state Studio: shareable per-checkpoint preview links (#6486) 2026-06-24 06:31:53 -07:00
storage Studio: expose Windows drive roots in the folder browser (#7082) 2026-07-15 00:24:11 -07:00
tests Feat/model picker per model config (#6647) 2026-07-17 06:08:01 -07:00
utils Feat/model picker per model config (#6647) 2026-07-17 06:08:01 -07:00
__init__.py Final cleanup 2026-03-12 18:28:04 +00:00
_platform_compat.py Reduce and tighten code comments and docstrings repo-wide (#6095) 2026-06-08 23:09:51 -07:00
cloudflare_tunnel.py Reap Studio child processes when the parent dies abnormally (#6425) 2026-06-18 05:51:22 -07:00
colab.py Studio: make the Cloudflare tunnel opt-in (off by default) (#7046) 2026-07-15 06:13:25 -07:00
main.py Feat/model picker per model config (#6647) 2026-07-17 06:08:01 -07:00
run.py Studio: make the Cloudflare tunnel opt-in (off by default) (#7046) 2026-07-15 06:13:25 -07:00
startup_banner.py Fix Windows Studio UTF-8 startup handling (#6614) 2026-07-01 13:47:33 +01:00