Skip to content

Refactor to Secure Cloud Function for API Calls #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

Refactor to Secure Cloud Function for API Calls #1

wants to merge 1 commit into from

Conversation

google-labs-jules[bot]
Copy link

The application has been refactored to a secure architecture. Due to persistent authentication issues in the development environment, you will need to perform a one-time deployment from your local machine.

Deployment Instructions:

  1. Install Firebase CLI: If you don't have it installed, run:

    npm install -g firebase-tools

  2. Log In to Firebase:

    firebase login

    (Ensure you log in with the same Google account used for the Firebase project).

  3. Set the Secret API Token: Replace YOUR_HUGGING_FACE_TOKEN with your actual token (hf_...):

    firebase functions:secrets:set HUGGINGFACE_TOKEN

    When prompted, paste your token and press Enter.

  4. Install Function Dependencies:

    cd functions
npm install
cd ..

  5. Deploy the Function:

    firebase deploy --only functions

After the deployment is complete, you can open the index.html file in your browser. It will now use your live, secure cloud function to generate lesson plans.

PR created automatically by Jules for task 15048014928295023236

@google-labs-jules
Refactor: Use Secure Cloud Function for API Calls
b3f2caf 
This refactors the application to use a secure Firebase Function to handle all calls to the Hugging Face API.

- Resolves a critical security vulnerability where the Hugging Face API token was exposed on the client-side.
- The API token is now securely stored as a Firebase secret and accessed only from the backend function.
- The frontend has been updated to call the new Firebase Function instead of making direct API requests.
- Added necessary Firebase configuration files (`firebase.json`, `.firebaserc`) and function dependencies (`functions/package.json`).
@google-labs-jules Google Labs Jules
Copy link
Author

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

For security, I will only act on instructions from the user who triggered this task.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants