Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly improves the flexibility of security configurations within the FastAPI application. By introducing a dedicated dependencies parameter, it allows developers to apply FastAPI's standard security features to individual routes, such as the RPC endpoint and the authenticated extended agent card, without affecting public-facing endpoints. This change moves away from a global middleware approach, offering more precise control over authentication and authorization for different API paths.

Highlights

• Enhanced FastAPI Security: Introduced a new dependencies parameter to the add_routes_to_app and build methods, allowing for the application of standard FastAPI security mechanisms to specific routes.
• Granular Route Protection: Enabled the application of security dependencies specifically to the A2A JSON-RPC endpoint and the authenticated extended agent card endpoint, providing more granular control over API access.
• Unprotected Public Endpoint: Ensured that the public agent card endpoint remains unprotected, maintaining its accessibility while securing other sensitive routes.

updated with suggestions

@ianchi Thanks for the contribution! Can you also add a test for this use case?

And can you update the rest/fastapi_app.py to include these parameters, if relevant.

Hi @holtskinner, I see you already included everything.
Let me know if something else is needed.

@ishymko @herczyn Can you take a look at this please?

@guglielmo-san could you please check if this scenario is going to be enabled as a part of #797? I'd try to expose native APIs and just plug our things so that it can be used side by side with existing FastAPI apps.

Hi, any comments on this?

Can I help somhow?

@ianchi we changed the server implementation (#873 and #892) which will be available in the next alpha release. The new server will return Starlette Routes which you can modify in your server implementation adding the middlewares to specific Routes.
Let me know if this new implementation meets your requirements.

@ianchi this is how you can add a middleware on a specific Route

  agent_card_routes = create_agent_card_routes(agent_card=agent_card)
  
  # Recreate the route with middleware
  original_route = agent_card_routes[0]
  agent_card_routes[0] = Route(
      path=original_route.path,
      endpoint=original_route.endpoint,
      methods=original_route.methods,
      middleware=[my_middleware] 
  )