Update app.py

app.py

@@ -6,6 +6,22 @@ logging.basicConfig(level=logging.DEBUG)
 
 app = Flask(__name__)
 
+def require_token(f):
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        auth_header = request.headers.get("Authorization")
+        if not auth_header:
+            return jsonify({"error": "Authorization header missing"}), 401
+        try:
+            token = auth_header.split("Bearer ")[1]
+            if token != API_TOKEN:
+                return jsonify({"error": "Invalid token"}), 403
+        except IndexError:
+            return jsonify({"error": "Invalid Authorization header format"}), 401
+        return f(*args, **kwargs)
+    return decorated
+    
+
 # Load the Qwen3-Embedding-0.6B model (adjust the path as needed)
 model = SentenceTransformer(model_name_or_path="Qwen/Qwen3-Embedding-0.6B")
 
@@ -14,6 +30,7 @@ def home():
     return 'Hello from Flask on Hugging Face!'
     
 @app.route('/embed', methods=['POST'])
+@require_token
 def get_embedding():
     try:
         text = request.json.get('text', '')