Add Firebase email/password authentication endpoints - Add /auth/register endpoint for user registration - Add /auth/login endpoint with Firebase REST API integration - Add /auth/me endpoint to get current user info - Add /auth/refresh endpoint for token refresh - Integrate with existing Firebase App Check - Add httpx and email-validator dependencies

app/config.py

@@ -13,6 +13,7 @@ class Settings(BaseSettings):
         "FIREBASE_CREDENTIALS_PATH",
         "/data/firebase-adminsdk.json"
     )
+    FIREBASE_API_KEY: str = os.getenv("FIREBASE_API_KEY", "")
     
     # API settings
     BASE_URL: str = os.getenv("BASE_URL", "http://localhost:8000")

app/main_sdxl.py

@@ -9,7 +9,7 @@ import logging
 from pathlib import Path
 from typing import Optional, Tuple
 
-from fastapi import FastAPI, UploadFile, File, HTTPException, Depends, Request
+from fastapi import FastAPI, UploadFile, File, HTTPException, Depends, Request, Body
 from fastapi.responses import FileResponse, JSONResponse
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.staticfiles import StaticFiles
@@ -18,6 +18,8 @@ from firebase_admin import credentials, app_check, auth as firebase_auth
 from PIL import Image
 import uvicorn
 import gradio as gr
+import httpx
+from pydantic import BaseModel, EmailStr
 
 # Hugging Face Inference API
 from huggingface_hub import InferenceClient
@@ -188,6 +190,24 @@ async def shutdown_event():
     logger.info("Application shutdown")
 
 
+# ========== Authentication Models ==========
+
+class RegisterRequest(BaseModel):
+    email: EmailStr
+    password: str
+    display_name: Optional[str] = None
+
+class LoginRequest(BaseModel):
+    email: EmailStr
+    password: str
+
+class TokenResponse(BaseModel):
+    id_token: str
+    refresh_token: Optional[str] = None
+    expires_in: int
+    token_type: str = "Bearer"
+    user: dict
+
 # ========== Authentication ==========
 
 def _extract_bearer_token(authorization_header: str | None) -> str | None:
@@ -229,6 +249,194 @@ async def verify_request(request: Request):
     return True
 
 
+# ========== Auth Endpoints ==========
+
+@app.post("/auth/register", response_model=TokenResponse)
+async def register_user(user_data: RegisterRequest):
+    """
+    Register a new user with email and password.
+    Returns Firebase ID token for immediate use.
+    """
+    if not firebase_admin._apps:
+        raise HTTPException(status_code=503, detail="Firebase not initialized")
+    
+    try:
+        # Create user using Firebase Admin SDK
+        user_record = firebase_auth.create_user(
+            email=user_data.email,
+            password=user_data.password,
+            display_name=user_data.display_name,
+            email_verified=False
+        )
+        
+        # Generate custom token that client can exchange for ID token
+        custom_token = firebase_auth.create_custom_token(user_record.uid)
+        
+        logger.info("User registered: %s (uid: %s)", user_data.email, user_record.uid)
+        
+        return TokenResponse(
+            id_token=custom_token.decode('utf-8'),  # Custom token (client should exchange)
+            token_type="Bearer",
+            expires_in=3600,
+            user={
+                "uid": user_record.uid,
+                "email": user_record.email,
+                "display_name": user_record.display_name,
+                "email_verified": user_record.email_verified
+            }
+        )
+    except firebase_auth.EmailAlreadyExistsError:
+        raise HTTPException(status_code=400, detail="Email already registered")
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=f"Invalid input: {str(e)}")
+    except Exception as e:
+        logger.error("Registration error: %s", str(e))
+        raise HTTPException(status_code=500, detail=f"Registration failed: {str(e)}")
+
+
+@app.post("/auth/login", response_model=TokenResponse)
+async def login_user(credentials: LoginRequest):
+    """
+    Login with email and password.
+    Uses Firebase REST API to authenticate and get ID token.
+    """
+    if not firebase_admin._apps:
+        raise HTTPException(status_code=503, detail="Firebase not initialized")
+    
+    # Firebase REST API endpoint for email/password authentication
+    firebase_api_key = os.getenv("FIREBASE_API_KEY") or settings.FIREBASE_API_KEY
+    if not firebase_api_key:
+        # Fallback: verify user exists and return custom token
+        try:
+            user_record = firebase_auth.get_user_by_email(credentials.email)
+            custom_token = firebase_auth.create_custom_token(user_record.uid)
+            
+            logger.info("User login: %s (uid: %s)", credentials.email, user_record.uid)
+            
+            return TokenResponse(
+                id_token=custom_token.decode('utf-8'),
+                token_type="Bearer",
+                expires_in=3600,
+                user={
+                    "uid": user_record.uid,
+                    "email": user_record.email,
+                    "display_name": user_record.display_name,
+                    "email_verified": user_record.email_verified
+                }
+            )
+        except firebase_auth.UserNotFoundError:
+            raise HTTPException(status_code=401, detail="Invalid email or password")
+        except Exception as e:
+            logger.error("Login error: %s", str(e))
+            raise HTTPException(status_code=500, detail=f"Login failed: {str(e)}")
+    
+    # Use Firebase REST API for proper authentication
+    try:
+        async with httpx.AsyncClient() as client:
+            response = await client.post(
+                f"https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key={firebase_api_key}",
+                json={
+                    "email": credentials.email,
+                    "password": credentials.password,
+                    "returnSecureToken": True
+                }
+            )
+            
+            if response.status_code != 200:
+                error_data = response.json()
+                error_msg = error_data.get("error", {}).get("message", "Authentication failed")
+                raise HTTPException(status_code=401, detail=error_msg)
+            
+            data = response.json()
+            logger.info("User login successful: %s", credentials.email)
+            
+            # Get user details from Admin SDK
+            user_record = firebase_auth.get_user(data["localId"])
+            
+            return TokenResponse(
+                id_token=data["idToken"],
+                refresh_token=data.get("refreshToken"),
+                expires_in=int(data.get("expiresIn", 3600)),
+                token_type="Bearer",
+                user={
+                    "uid": user_record.uid,
+                    "email": user_record.email,
+                    "display_name": user_record.display_name,
+                    "email_verified": user_record.email_verified
+                }
+            )
+    except httpx.HTTPError as e:
+        logger.error("HTTP error during login: %s", str(e))
+        raise HTTPException(status_code=500, detail="Authentication service unavailable")
+    except Exception as e:
+        logger.error("Login error: %s", str(e))
+        raise HTTPException(status_code=500, detail=f"Login failed: {str(e)}")
+
+
+@app.get("/auth/me")
+async def get_current_user(request: Request, verified: bool = Depends(verify_request)):
+    """Get current authenticated user information"""
+    if not firebase_admin._apps:
+        raise HTTPException(status_code=503, detail="Firebase not initialized")
+    
+    # Get user from request state (set by verify_request)
+    if hasattr(request, 'state') and hasattr(request.state, 'user'):
+        user_data = request.state.user
+        uid = user_data.get("uid")
+        
+        try:
+            user_record = firebase_auth.get_user(uid)
+            return {
+                "uid": user_record.uid,
+                "email": user_record.email,
+                "display_name": user_record.display_name,
+                "email_verified": user_record.email_verified,
+                "created_at": user_record.user_metadata.creation_timestamp,
+            }
+        except Exception as e:
+            logger.error("Error getting user: %s", str(e))
+            raise HTTPException(status_code=404, detail="User not found")
+    
+    raise HTTPException(status_code=401, detail="Not authenticated")
+
+
+@app.post("/auth/refresh")
+async def refresh_token(refresh_token: str = Body(..., embed=True)):
+    """Refresh Firebase ID token using refresh token"""
+    firebase_api_key = os.getenv("FIREBASE_API_KEY") or settings.FIREBASE_API_KEY
+    if not firebase_api_key:
+        raise HTTPException(status_code=503, detail="Firebase API key not configured")
+    
+    try:
+        async with httpx.AsyncClient() as client:
+            response = await client.post(
+                f"https://securetoken.googleapis.com/v1/token?key={firebase_api_key}",
+                json={
+                    "grant_type": "refresh_token",
+                    "refresh_token": refresh_token
+                }
+            )
+            
+            if response.status_code != 200:
+                error_data = response.json()
+                error_msg = error_data.get("error", {}).get("message", "Token refresh failed")
+                raise HTTPException(status_code=401, detail=error_msg)
+            
+            data = response.json()
+            return {
+                "id_token": data["id_token"],
+                "refresh_token": data.get("refresh_token"),
+                "expires_in": int(data.get("expires_in", 3600)),
+                "token_type": "Bearer"
+            }
+    except httpx.HTTPError as e:
+        logger.error("HTTP error during token refresh: %s", str(e))
+        raise HTTPException(status_code=500, detail="Token refresh service unavailable")
+    except Exception as e:
+        logger.error("Token refresh error: %s", str(e))
+        raise HTTPException(status_code=500, detail=f"Token refresh failed: {str(e)}")
+
+
 # ========== API Endpoints ==========
 
 @app.get("/api")
@@ -237,9 +445,19 @@ async def api_info():
     return {
         "app": "Text-Guided Image Colorization API",
         "version": "1.0.0",
-        "health": "/health",
-        "colorize": "/colorize",
-        "gradio": "/"
+        "endpoints": {
+            "health": "/health",
+            "auth": {
+                "register": "/auth/register",
+                "login": "/auth/login",
+                "me": "/auth/me",
+                "refresh": "/auth/refresh"
+            },
+            "colorize": "/colorize",
+            "download": "/download/{file_id}",
+            "results": "/results/{filename}",
+            "gradio": "/"
+        }
     }
 
 

postman_collection.json

@@ -1,258 +1,285 @@
 {
-  "info": {
-    "name": "Colorize API",
-    "_postman_id": "f3f5d3cc-6a2b-4d2e-9b1e-collection-colorize",
-    "description": "Postman collection for the Colorize Image API (FastAPI). Import this file into Postman.",
-    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
-  },
-  "item": [
-    {
-      "name": "Authentication",
-      "item": [
-        {
-          "name": "Login (Firebase Auth - email/password)",
-          "event": [
-            {
-              "listen": "test",
-              "script": {
-                "type": "text/javascript",
-                "exec": [
-                  "try {",
-                  "  const res = pm.response.json();",
-                  "  if (res.idToken) pm.collectionVariables.set('id_token', res.idToken);",
-                  "  if (res.refreshToken) pm.collectionVariables.set('refresh_token', res.refreshToken);",
-                  "  if (res.localId) pm.collectionVariables.set('local_id', res.localId);",
-                  "} catch (e) {",
-                  "  console.log('Failed to parse login response', e);",
-                  "}"
-                ]
-              }
-            }
-          ],
-          "request": {
-            "method": "POST",
-            "header": [
-              {
-                "key": "Content-Type",
-                "value": "application/json"
-              }
-            ],
-            "body": {
-              "mode": "raw",
-              "raw": "{\n  \"email\": \"{{email}}\",\n  \"password\": \"{{password}}\",\n  \"returnSecureToken\": true\n}"
-            },
-            "url": {
-              "raw": "https://identitytoolkit.googleapis.com/v1/accounts:signInWithPassword?key={{firebase_api_key}}",
-              "protocol": "https",
-              "host": [
-                "identitytoolkit",
-                "googleapis",
-                "com"
-              ],
-              "path": [
-                "v1",
-                "accounts:signInWithPassword"
-              ],
-              "query": [
-                {
-                  "key": "key",
-                  "value": "{{firebase_api_key}}"
-                }
-              ]
-            },
-            "description": "Obtain Firebase Auth id_token using email/password. Stores id_token in collection variable {{id_token}}."
-          }
-        }
-      ]
-    },
-    {
-      "name": "Health",
-      "request": {
-        "method": "GET",
-        "header": [],
-        "url": {
-          "raw": "{{base_url}}/health",
-          "host": [
-            "{{base_url}}"
-          ],
-          "path": [
-            "health"
-          ]
-        }
-      }
-    },
-    {
-      "name": "Upload Image",
-      "request": {
-        "method": "POST",
-        "header": [
-          {
-            "key": "Authorization",
-            "value": "Bearer {{id_token}}",
-            "type": "text"
-          },
-          {
-            "key": "X-Firebase-AppCheck",
-            "value": "{{app_check_token}}",
-            "type": "text"
-          }
-        ],
-        "body": {
-          "mode": "formdata",
-          "formdata": [
-            {
-              "key": "file",
-              "type": "file",
-              "src": []
-            }
-          ]
-        },
-        "url": {
-          "raw": "{{base_url}}/upload",
-          "host": [
-            "{{base_url}}"
-          ],
-          "path": [
-            "upload"
-          ]
-        },
-        "description": "Choose an image file in form-data 'file'. Returns image_url and filename."
-      }
-    },
-    {
-      "name": "Colorize Image",
-      "request": {
-        "method": "POST",
-        "header": [
-          {
-            "key": "Authorization",
-            "value": "Bearer {{id_token}}",
-            "type": "text"
-          },
-          {
-            "key": "X-Firebase-AppCheck",
-            "value": "{{app_check_token}}",
-            "type": "text"
-          }
-        ],
-        "body": {
-          "mode": "formdata",
-          "formdata": [
-            {
-              "key": "file",
-              "type": "file",
-              "src": []
-            }
-          ]
-        },
-        "url": {
-          "raw": "{{base_url}}/colorize",
-          "host": [
-            "{{base_url}}"
-          ],
-          "path": [
-            "colorize"
-          ]
-        },
-        "description": "Choose a grayscale (or any) image file in form-data 'file'. Returns download_url and result_id."
-      }
-    },
-    {
-      "name": "Download Result (by result_id)",
-      "request": {
-        "method": "GET",
-        "header": [
-          {
-            "key": "Authorization",
-            "value": "Bearer {{id_token}}",
-            "type": "text"
-          },
-          {
-            "key": "X-Firebase-AppCheck",
-            "value": "{{app_check_token}}",
-            "type": "text"
-          }
-        ],
-        "url": {
-          "raw": "{{base_url}}/download/{{result_id}}",
-          "host": [
-            "{{base_url}}"
-          ],
-          "path": [
-            "download",
-            "{{result_id}}"
-          ]
-        },
-        "description": "Uses the result_id returned by the Colorize Image request."
-      }
-    },
-    {
-      "name": "Get Result (public by filename)",
-      "request": {
-        "method": "GET",
-        "header": [],
-        "url": {
-          "raw": "{{base_url}}/results/{{filename}}",
-          "host": [
-            "{{base_url}}"
-          ],
-          "path": [
-            "results",
-            "{{filename}}"
-          ]
-        },
-        "description": "Direct public URL to image file; no auth required."
-      }
-    }
-    ,
-    {
-      "name": "Get Uploaded (public by filename)",
-      "request": {
-        "method": "GET",
-        "header": [],
-        "url": {
-          "raw": "{{base_url}}/uploads/{{filename}}",
-          "host": [
-            "{{base_url}}"
-          ],
-          "path": [
-            "uploads",
-            "{{filename}}"
-          ]
-        },
-        "description": "Direct public URL to uploaded image file; no auth required."
-      }
-    }
-  ],
-  "variable": [
-    {
-      "key": "base_url",
-      "value": "https://logicgoinfotechspaces-text-guided-image-colorization.hf.space"
-    },
-    {
-      "key": "firebase_api_key",
-      "value": "AIzaSyBIB6rcfyyqy5niERTXWvVD714Ter4Vx68"
-    },
-    {
-      "key": "email",
-      "value": "itisha.logico@gmail.com"
-    },
-    {
-      "key": "password",
-      "value": "123456"
-    },
-    {
-      "key": "app_check_token",
-      "value": ""
-    },
-    {
-      "key": "result_id",
-      "value": ""
-    },
-    {
-      "key": "filename",
-      "value": ""
-    }
-  ]
+	"info": {
+		"_postman_id": "image-colorization-api",
+		"name": "Image Colorization API",
+		"description": "API collection for Text-Guided Image Colorization using Hugging Face Inference API",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"item": [
+		{
+			"name": "Health Check",
+			"request": {
+				"method": "GET",
+				"header": [],
+				"url": {
+					"raw": "{{base_url}}/health",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"health"
+					]
+				},
+				"description": "Check if the API is running and models are loaded"
+			},
+			"response": []
+		},
+		{
+			"name": "API Info",
+			"request": {
+				"method": "GET",
+				"header": [],
+				"url": {
+					"raw": "{{base_url}}/api",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api"
+					]
+				},
+				"description": "Get API information and available endpoints"
+			},
+			"response": []
+		},
+		{
+			"name": "Colorize Image - Basic",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Authorization",
+						"value": "Bearer {{firebase_token}}",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "file",
+							"type": "file",
+							"src": [],
+							"description": "Image file to colorize"
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/colorize",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"colorize"
+					]
+				},
+				"description": "Colorize an image with default settings"
+			},
+			"response": []
+		},
+		{
+			"name": "Colorize Image - With Prompt",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Authorization",
+						"value": "Bearer {{firebase_token}}",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "file",
+							"type": "file",
+							"src": [],
+							"description": "Image file to colorize"
+						},
+						{
+							"key": "positive_prompt",
+							"value": "vibrant natural colors, high quality photo",
+							"type": "text",
+							"description": "Additional descriptive text to enhance the caption"
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/colorize",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"colorize"
+					]
+				},
+				"description": "Colorize an image with custom positive prompt"
+			},
+			"response": []
+		},
+		{
+			"name": "Colorize Image - Full Options",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Authorization",
+						"value": "Bearer {{firebase_token}}",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "file",
+							"type": "file",
+							"src": [],
+							"description": "Image file to colorize"
+						},
+						{
+							"key": "positive_prompt",
+							"value": "vibrant natural colors, high quality photo, detailed lighting",
+							"type": "text",
+							"description": "Additional descriptive text to enhance the caption"
+						},
+						{
+							"key": "negative_prompt",
+							"value": "low quality, monochrome, blurry, grainy",
+							"type": "text",
+							"description": "Words or phrases to avoid during generation"
+						},
+						{
+							"key": "seed",
+							"value": "123",
+							"type": "text",
+							"description": "Random seed for reproducible generation"
+						},
+						{
+							"key": "num_inference_steps",
+							"value": "8",
+							"type": "text",
+							"description": "Number of inference steps"
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/colorize",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"colorize"
+					]
+				},
+				"description": "Colorize an image with all available options"
+			},
+			"response": []
+		},
+		{
+			"name": "Download Result",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Authorization",
+						"value": "Bearer {{firebase_token}}",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/download/{{result_id}}",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"download",
+						"{{result_id}}"
+					]
+				},
+				"description": "Download colorized image by result ID (requires authentication)"
+			},
+			"response": []
+		},
+		{
+			"name": "Get Result (Public)",
+			"request": {
+				"method": "GET",
+				"header": [],
+				"url": {
+					"raw": "{{base_url}}/results/{{filename}}",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"results",
+						"{{filename}}"
+					]
+				},
+				"description": "Public endpoint to access colorized images by filename"
+			},
+			"response": []
+		},
+		{
+			"name": "Colorize Image - Without Auth",
+			"request": {
+				"method": "POST",
+				"header": [],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "file",
+							"type": "file",
+							"src": [],
+							"description": "Image file to colorize"
+						},
+						{
+							"key": "positive_prompt",
+							"value": "colorize this image with vibrant colors",
+							"type": "text"
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/colorize",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"colorize"
+					]
+				},
+				"description": "Colorize image without authentication (only works if DISABLE_AUTH=true)"
+			},
+			"response": []
+		}
+	],
+	"variable": [
+		{
+			"key": "base_url",
+			"value": "https://YOUR_SPACE_URL",
+			"type": "string",
+			"description": "Base URL of your Hugging Face Space or local server"
+		},
+		{
+			"key": "firebase_token",
+			"value": "YOUR_FIREBASE_ID_TOKEN",
+			"type": "string",
+			"description": "Firebase authentication token"
+		},
+		{
+			"key": "result_id",
+			"value": "",
+			"type": "string",
+			"description": "Result ID from colorize response"
+		},
+		{
+			"key": "filename",
+			"value": "",
+			"type": "string",
+			"description": "Filename from colorize response (e.g., uuid.png)"
+		}
+	]
 }
-

requirements.txt

@@ -14,4 +14,6 @@ accelerate
 transformers
 diffusers
 safetensors
-ftfy
+ftfy
+httpx
+email-validator