MLT-OSS / open-assistant-api

The Open Assistant API is a ready-to-use, open-source, self-hosted agent/gpts orchestration creation framework, supporting customized extensions for LLM, RAG, function call, and tools capabilities. It also supports seamless integration with the openai/langchain sdk.
MIT License
270 stars 53 forks source link

Supporting basic access control #16

Closed lml2468 closed 8 months ago

lml2468 commented 9 months ago

The latest version has no access control policy, and the list interface can retrieve all created assistants. This state cannot meet the requirements of a production environment.

Considering the two key parameters required when creating a client, base_url and api_key, we can consider adding the following basic access control policy: Use the base_url to divide the group to which the owner of the created assistant belongs, and use the api_key to differentiate the owner who created the assistant. image