From db20d12bcf227aadc51d5372d60a4233bbe16dca Mon Sep 17 00:00:00 2001
From: Adrian Stritzinger <Adrian.Stritzinger@askui.com>
Date: Fri, 11 Jul 2025 14:04:00 +0200
Subject: [PATCH] fix(models): make askui token optional

---
 src/askui/models/askui/inference_api.py | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

diff --git a/src/askui/models/askui/inference_api.py b/src/askui/models/askui/inference_api.py
index e4c5fa26..ab480f5b 100644
--- a/src/askui/models/askui/inference_api.py
+++ b/src/askui/models/askui/inference_api.py
@@ -11,10 +11,10 @@
     BetaThinkingConfigParam,
     BetaToolChoiceParam,
 )
-from pydantic import UUID4, Field, HttpUrl, SecretStr
+from pydantic import UUID4, Field, HttpUrl, SecretStr, model_validator
 from pydantic_settings import BaseSettings, SettingsConfigDict
 from tenacity import retry, retry_if_exception, stop_after_attempt, wait_exponential
-from typing_extensions import override
+from typing_extensions import Self, override
 
 from askui.locators.locators import Locator
 from askui.locators.serializers import AskUiLocatorSerializer, AskUiSerializedLocator
@@ -51,15 +51,15 @@ class AskUiInferenceApiSettings(BaseSettings):
         validation_alias="ASKUI_INFERENCE_ENDPOINT",
     )
     messages: MessageSettings = Field(default_factory=MessageSettings)
-    authorization: str | NotGiven = Field(
+    authorization: SecretStr | NotGiven = Field(
         default=NOT_GIVEN,
         description=(
             "The authorization header to use for the AskUI Inference API. "
             "If not provided, the token will be used to generate the header."
         ),
     )
-    token: SecretStr = Field(
-        default=...,
+    token: SecretStr | NotGiven = Field(
+        default=NOT_GIVEN,
         validation_alias="ASKUI_TOKEN",
     )
     workspace_id: UUID4 = Field(
@@ -67,10 +67,21 @@ class AskUiInferenceApiSettings(BaseSettings):
         validation_alias="ASKUI_WORKSPACE_ID",
     )
 
+    @model_validator(mode="after")
+    def check_authorization(self) -> "Self":
+        if self.authorization == NOT_GIVEN and self.token == NOT_GIVEN:
+            error_message = (
+                'Either authorization ("ASKUI__AUTHORIZATION" environment variable) '
+                'or token ("ASKUI_TOKEN" environment variable) must be provided'
+            )
+            raise ValueError(error_message)
+        return self
+
     @property
     def authorization_header(self) -> str:
         if self.authorization:
-            return self.authorization
+            return self.authorization.get_secret_value()
+        assert not isinstance(self.token, NotGiven), "Token is not set"
         token_str = self.token.get_secret_value()
         token_base64 = base64.b64encode(token_str.encode()).decode()
         return f"Basic {token_base64}"