AAP-58794: Enable Lightspeed Service's chatbot API Key authentication.

Signed-off-by: romartin <roger600@gmail.com>

Author: romartin

ansible_ai_connect/ai/api/model_pipelines/http/pipelines.py

@@ -146,7 +146,11 @@ def self_test(self) -> HealthCheckSummary:
             }
         )
         try:
-            headers = {"Content-Type": "application/json"}
+            headers = {
+                "Content-Type": "application/json",
+            }
+            if settings.CHATBOT_API_KEY is not None:
+                headers["Authorization"] = f"Bearer {settings.CHATBOT_API_KEY}"
             r = self.session.get(
                 self.config.inference_url + "/readiness",
                 headers=headers,
@@ -213,6 +217,8 @@ def invoke(self, params: ChatBotParameters) -> ChatBotResponse:
             data["no_tools"] = bool(no_tools)
 
         headers = self.headers or {}
+        if params.auth_header:
+            headers["Authorization"] = params.auth_header
         if params.mcp_headers:
             headers["MCP-HEADERS"] = json.dumps(params.mcp_headers)
 
@@ -323,7 +329,8 @@ async def async_invoke(self, params: StreamingChatBotParameters) -> AsyncGenerat
                 "Content-Type": "application/json",
                 "Accept": "application/json,text/event-stream",
             }
-
+            if params.auth_header:
+                headers["Authorization"] = params.auth_header
             if params.mcp_headers:
                 headers["MCP-HEADERS"] = json.dumps(params.mcp_headers)
 

ansible_ai_connect/ai/api/model_pipelines/pipelines.py

@@ -231,6 +231,7 @@ class ChatBotParameters:
     model_id: str
     conversation_id: Optional[str]
     system_prompt: str
+    auth_header: Optional[str]
     mcp_headers: Optional[dict[str, dict[str, str]]] = field(kw_only=True, default=None)
     no_tools: bool
 
@@ -242,6 +243,7 @@ def init(
         model_id: Optional[str] = None,
         conversation_id: Optional[str] = None,
         system_prompt: Optional[str] = None,
+        auth_header: Optional[str] = None,
         mcp_headers: Optional[dict[str, dict[str, str]]] = None,
         no_tools: Optional[bool] = False,
     ):
@@ -251,6 +253,7 @@ def init(
             model_id=model_id,
             conversation_id=conversation_id,
             system_prompt=system_prompt,
+            auth_header=auth_header,
             mcp_headers=mcp_headers,
             no_tools=no_tools,
         )
@@ -274,6 +277,7 @@ def init(
         system_prompt: Optional[str] = None,
         media_type: Optional[str] = None,
         event: Optional[Any] = None,
+        auth_header: Optional[str] = None,
         mcp_headers: Optional[dict[str, dict[str, str]]] = None,
         no_tools: Optional[bool] = False,
     ):
@@ -285,6 +289,7 @@ def init(
             system_prompt=system_prompt,
             media_type=media_type,
             event=event,
+            auth_header=auth_header,
             mcp_headers=mcp_headers,
             no_tools=no_tools,
         )

ansible_ai_connect/ai/api/views.py

@@ -261,6 +261,10 @@ def finalize_response(self, request, response, *args, **kwargs):
         send_schema1_event(self.event)
         return response
 
+    @staticmethod
+    def get_auth_header(request: Request, config: HttpConfiguration) -> str:
+        return f"Bearer {settings.CHATBOT_API_KEY}"
+
     @staticmethod
     def get_mcp_headers(request: Request, config: HttpConfiguration) -> dict:
         mcp_headers = {}
@@ -1122,6 +1126,7 @@ def post(self, request) -> Response:
         self.event.modelName = self.req_model_id or self.llm.config.model_id
         self.event.no_tools = no_tools
 
+        auth_header = self.get_auth_header(request, self.llm.config)
         mcp_headers = self.get_mcp_headers(request, self.llm.config)
 
         data = self.llm.invoke(
@@ -1131,6 +1136,7 @@ def post(self, request) -> Response:
                 model_id=self.req_model_id or self.llm.config.model_id,
                 provider=req_provider,
                 conversation_id=conversation_id,
+                auth_header=auth_header,
                 mcp_headers=mcp_headers,
                 no_tools=no_tools,
             )
@@ -1221,6 +1227,7 @@ def post(self, request) -> StreamingHttpResponse:
         self.event.modelName = self.req_model_id or self.llm.config.model_id
         self.event.no_tools = no_tools
 
+        auth_header = self.get_auth_header(request, self.llm.config)
         mcp_headers = self.get_mcp_headers(request, self.llm.config)
 
         return self.llm.invoke(
@@ -1232,6 +1239,7 @@ def post(self, request) -> StreamingHttpResponse:
                 conversation_id=conversation_id,
                 media_type=media_type,
                 event=copy.copy(self.event),
+                auth_header=auth_header,
                 mcp_headers=mcp_headers,
                 no_tools=no_tools,
             )

ansible_ai_connect/main/settings/base.py

@@ -595,6 +595,7 @@ def is_ssl_enabled(value: str) -> bool:
 CHATBOT_DEFAULT_PROVIDER = os.getenv("CHATBOT_DEFAULT_PROVIDER")
 CHATBOT_DEBUG_UI = os.getenv("CHATBOT_DEBUG_UI", "False").lower() == "true"
 CHATBOT_DEFAULT_SYSTEM_PROMPT = os.getenv("CHATBOT_DEFAULT_SYSTEM_PROMPT")
+CHATBOT_API_KEY = os.getenv("CHATBOT_API_KEY")
 # ==========================================
 
 # ==========================================