Update app.py

app.py

@@ -18,8 +18,63 @@ import onnxruntime as ort
 import cv2
 from roop.face_analyser import get_one_face
 
+from cryptography.hazmat.primitives.asymmetric import rsa, padding
+from cryptography.hazmat.primitives import serialization, hashes
+from cryptography.hazmat.backends import default_backend
+from cryptography.hazmat.primitives.asymmetric import utils
+import base64
+import json
+import datetime
+
+def load_public_key_from_file(file_path):
+    with open(file_path, "rb") as key_file:
+        public_key = serialization.load_pem_public_key(
+            key_file.read(),
+            backend=default_backend()
+        )
+    return public_key
+
+def verify_signature(public_key, data, signature):
+    """
+    Verify a signature with a public key.
+    Converts the data to bytes if it's not already in byte format.
+    """
+    # Ensure the data is in bytes. If it's a string, encode it to UTF-8.
+    if isinstance(data, str):
+        data = data.encode('utf-8')
+
+    try:
+        # Verify the signature
+        public_key.verify(
+            signature,
+            data,
+            padding.PSS(
+                mgf=padding.MGF1(hashes.SHA256()),
+                salt_length=padding.PSS.MAX_LENGTH
+            ),
+            hashes.SHA256()
+        )
+        return True
+    except Exception as e:
+        print("Verification failed:", e)
+        return False
+
+public_key = load_public_key_from_file("./nsfwais.pubkey.pem")
+
 @spaces.GPU
-def swap_face(source_file, target_file, doFaceEnhancer):
+def swap_face(source_file, target_file, doFaceEnhancer, skey):
+    
+    skey = json.loads(skey)
+    #first validate skey
+    signature = base64.b64decode(skey["s"])
+    if not verify_signature(public_key, skey["t"], signature):
+        raise Exception("verify authkey failed.")
+    timestamp_requested = int(skey["t"])
+    timestamp_now = int(datetime.datetime.utcnow().replace(tzinfo=datetime.timezone.utc).timestamp())
+    if timestamp_now - timestamp_requested > 600:
+        raise Exception(f"authkey timeout, {timestamp_now - timestamp_requested}")
+    print(f"authkey pass, {timestamp_now - timestamp_requested}")
+    
     session_id = str(uuid.uuid4())  # Tạo một UUID duy nhất cho mỗi phiên làm việc
     session_dir = f"temp/{session_id}"
     os.makedirs(session_dir, exist_ok=True)
@@ -81,7 +136,8 @@ app = gr.Interface(
     inputs=[
         gr.Image(), 
         gr.Image(), 
-        gr.Checkbox(label="Face Enhancer?", info="Do face enhancement?")
+        gr.Checkbox(label="Face Enhancer?", info="Do face enhancement?"), 
+        gr.Textbox(visible=False)
     ], 
     outputs="image"
 )