Fix security issue: Hardcoded API Key Exposed Through Insecure HTTP Transmission (CWE-798, CWE-319)

notebooks/cognee_openai_compatable_demo.ipynb

@@ -9,11 +9,20 @@
     }
    },
    "source": [
+    "import os\n",
     "from openai import OpenAI\n",
     "\n",
     "# Use /api/v1/auth/login to get JWT\n",
     "\n",
-    "client = OpenAI(api_key=\"COGNEE_API_KEY\", base_url=\"http://localhost:8000/api/v1/\")\n",
+    "# Retrieve API key from environment variable\n",
+    "api_key = os.getenv(\"COGNEE_API_KEY\")\n",
+    "if not api_key:\n",
+    "    raise EnvironmentError(\"COGNEE_API_KEY environment variable is not set.\")\n",
+    "\n",
+    "# Use HTTPS for secure transmission\n",
+    "base_url = \"https://localhost:8000/api/v1/\"\n",
+    "\n",
+    "client = OpenAI(api_key=api_key, base_url=base_url)\n",
     "\n",
     "client.responses.create(\n",
     "    model=\"cognee-v1\",\n",
@@ -26,8 +35,8 @@
      "output_type": "stream",
      "text": [
       "\n",
-      "\u001B[1mHTTP Request: POST http://localhost:8000/api/v1/responses \"HTTP/1.1 307 Temporary Redirect\"\u001B[0m\n",
-      "\u001B[1mHTTP Request: POST http://localhost:8000/api/v1/responses/ \"HTTP/1.1 200 OK\"\u001B[0m"
+      "\u001B[1mHTTP Request: POST https://localhost:8000/api/v1/responses \"HTTP/1.1 307 Temporary Redirect\"\u001B[0m\n",
+      "\u001B[1mHTTP Request: POST https://localhost:8000/api/v1/responses/ \"HTTP/1.1 200 OK\"\u001B[0m"
      ]
     },
     {
@@ -52,9 +61,18 @@
     }
    },
    "source": [
+    "import os\n",
     "from openai import OpenAI\n",
     "\n",
-    "client = OpenAI(api_key=\"COGNEE_API_KEY\", base_url=\"http://localhost:8000/api/v1/\")\n",
+    "# Retrieve API key from environment variable\n",
+    "api_key = os.getenv(\"COGNEE_API_KEY\")\n",
+    "if not api_key:\n",
+    "    raise EnvironmentError(\"COGNEE_API_KEY environment variable is not set.\")\n",
+    "\n",
+    "# Use HTTPS for secure transmission\n",
+    "base_url = \"https://localhost:8000/api/v1/\"\n",
+    "\n",
+    "client = OpenAI(api_key=api_key, base_url=base_url)\n",
     "\n",
     "client.responses.create(\n",
     "    model=\"cognee-v1\",\n",
@@ -67,8 +85,8 @@
      "output_type": "stream",
      "text": [
       "\n",
-      "\u001B[1mHTTP Request: POST http://localhost:8000/api/v1/responses \"HTTP/1.1 307 Temporary Redirect\"\u001B[0m\n",
-      "\u001B[1mHTTP Request: POST http://localhost:8000/api/v1/responses/ \"HTTP/1.1 200 OK\"\u001B[0m"
+      "\u001B[1mHTTP Request: POST https://localhost:8000/api/v1/responses \"HTTP/1.1 307 Temporary Redirect\"\u001B[0m\n",
+      "\u001B[1mHTTP Request: POST https://localhost:8000/api/v1/responses/ \"HTTP/1.1 200 OK\"\u001B[0m"
      ]
     },
     {
@@ -106,4 +124,4 @@
  },
  "nbformat": 4,
  "nbformat_minor": 2
-}
+}