Gemini-VideoGeneration

Sleeping

LehongWu commited on 30 days ago

Commit

06e36cd

verified ·

1 Parent(s): dc9d288

Upload folder using huggingface_hub

Files changed (7) hide show

.gitignore CHANGED Viewed

@@ -1,3 +1,12 @@
 examples
 output
-.venv

 examples
 output
+.venv
+venv
+.env
+.env.*
+!.env.example
+__pycache__/
+*.py[cod]
+*.egg-info/
+.pytest_cache/
+.DS_Store

docs/WEB_DEV_GUIDE.md CHANGED Viewed

@@ -31,6 +31,7 @@ Do not commit secrets; use a `.env` with your process manager if you like.
 | `WEB_UI_PASSWORD` | Login password. |
 | `SESSION_SECRET` | Session signing, e.g. `openssl rand -hex 32`. |
 | `GENERATION_OPTIONS_PATH` | Optional. Overrides default `web/config/generation_options.json`. |
 ```bash
 export GEMINI_API_KEY="your_key"

 | `WEB_UI_PASSWORD` | Login password. |
 | `SESSION_SECRET` | Session signing, e.g. `openssl rand -hex 32`. |
 | `GENERATION_OPTIONS_PATH` | Optional. Overrides default `web/config/generation_options.json`. |
+| `SESSION_COOKIE_SECURE` | Optional. Set to `1` / `true` / `yes` to send session cookies with the **Secure** flag (use on real HTTPS, e.g. Hugging Face). Leave unset for `http://127.0.0.1` local dev. Requires proxy to set `X-Forwarded-Proto` (see §10). |
 ```bash
 export GEMINI_API_KEY="your_key"

web/backend/main.py CHANGED Viewed

@@ -1,5 +1,6 @@
 """FastAPI application: session auth, Gemini generation API, static SPA."""
 from contextlib import asynccontextmanager
 from pathlib import Path
@@ -22,12 +23,21 @@ async def lifespan(app: FastAPI):
 app = FastAPI(title="Gemini Studio Web", lifespan=lifespan)
 app.add_middleware(
     SessionMiddleware,
     secret_key=get_session_secret(),
     max_age=14 * 24 * 3600,
     same_site="lax",
-    https_only=False,
 )
 app.include_router(auth.router)

 """FastAPI application: session auth, Gemini generation API, static SPA."""
+import os
 from contextlib import asynccontextmanager
 from pathlib import Path
 app = FastAPI(title="Gemini Studio Web", lifespan=lifespan)
+# Session cookie: default allows http://127.0.0.1 local dev. For HTTPS-only deployments
+# where the proxy sets X-Forwarded-Proto (see uvicorn --forwarded-allow-ips), set
+# SESSION_COOKIE_SECURE=1 so browsers get the Secure flag (recommended on HF Spaces).
+_session_secure = os.environ.get("SESSION_COOKIE_SECURE", "").strip().lower() in (
+    "1",
+    "true",
+    "yes",
+)
 app.add_middleware(
     SessionMiddleware,
     secret_key=get_session_secret(),
     max_age=14 * 24 * 3600,
     same_site="lax",
+    https_only=_session_secure,
 )
 app.include_router(auth.router)

web/backend/static/assets/index-Cxt2XIBW.js ADDED Viewed

The diff for this file is too large to render. See raw diff

web/backend/static/index.html CHANGED Viewed

@@ -43,7 +43,7 @@
         }
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-Ctfz00qX.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-BIkuBov8.css">
   </head>
   <body>

         }
       })();
     </script>
+    <script type="module" crossorigin src="/assets/index-Cxt2XIBW.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-BIkuBov8.css">
   </head>
   <body>

web/frontend/src/context/GenerationOptionsContext.tsx CHANGED Viewed

@@ -48,6 +48,10 @@ export function GenerationOptionsProvider({ children }: { children: ReactNode })
     let cancelled = false;
     fetch("/api/config/generation-options", { credentials: "include" })
       .then(async (r) => {
         const j = await r.json().catch(() => ({}));
         if (!r.ok) {
           const detail = (j as { detail?: unknown }).detail;
@@ -62,7 +66,8 @@ export function GenerationOptionsProvider({ children }: { children: ReactNode })
         return j as GenerationOptions;
       })
       .then((opts) => {
-        if (!cancelled) setData(opts);
       })
       .catch((e: unknown) => {
         if (!cancelled)

     let cancelled = false;
     fetch("/api/config/generation-options", { credentials: "include" })
       .then(async (r) => {
+        if (r.status === 401) {
+          window.location.assign("/login");
+          return null;
+        }
         const j = await r.json().catch(() => ({}));
         if (!r.ok) {
           const detail = (j as { detail?: unknown }).detail;
         return j as GenerationOptions;
       })
       .then((opts) => {
+        if (cancelled || opts === null) return;
+        setData(opts);
       })
       .catch((e: unknown) => {
         if (!cancelled)

web/frontend/src/pages/Login.tsx CHANGED Viewed

@@ -1,13 +1,23 @@
-import { FormEvent, useState } from "react";
 import { useNavigate } from "react-router-dom";
-import { login } from "../api";
 export function Login() {
   const [password, setPassword] = useState("");
   const [err, setErr] = useState<string | null>(null);
   const [loading, setLoading] = useState(false);
   const nav = useNavigate();
   async function onSubmit(e: FormEvent) {
     e.preventDefault();
     setErr(null);
@@ -23,6 +33,14 @@ export function Login() {
     }
   }
   return (
     <div className="min-h-screen flex items-center justify-center p-6 sm:p-10 bg-gradient-to-br from-paper via-indigo-50/35 to-violet-100/45">
       <div className="w-full max-w-md rounded-2xl border border-line/80 bg-white/85 backdrop-blur-sm shadow-xl shadow-indigo-950/10 p-10 sm:p-12">

+import { FormEvent, useEffect, useState } from "react";
 import { useNavigate } from "react-router-dom";
+import { fetchMe, login } from "../api";
 export function Login() {
   const [password, setPassword] = useState("");
   const [err, setErr] = useState<string | null>(null);
   const [loading, setLoading] = useState(false);
+  const [checkingSession, setCheckingSession] = useState(true);
   const nav = useNavigate();
+  useEffect(() => {
+    fetchMe()
+      .then((r) => {
+        if (r.authenticated) nav("/image", { replace: true });
+      })
+      .catch(() => {})
+      .finally(() => setCheckingSession(false));
+  }, [nav]);
   async function onSubmit(e: FormEvent) {
     e.preventDefault();
     setErr(null);
     }
   }
+  if (checkingSession) {
+    return (
+      <div className="min-h-screen flex items-center justify-center text-mist text-sm">
+        请稍候…
+      </div>
+    );
+  }
   return (
     <div className="min-h-screen flex items-center justify-center p-6 sm:p-10 bg-gradient-to-br from-paper via-indigo-50/35 to-violet-100/45">
       <div className="w-full max-w-md rounded-2xl border border-line/80 bg-white/85 backdrop-blur-sm shadow-xl shadow-indigo-950/10 p-10 sm:p-12">