chroma-core / chroma-core/chroma

[Feature Request]: API authencation (Basic, Token,...)

Open
#4,965 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Rust
Stars
29.3k
Forks
2.5k
Avg merge
1d 4h
Merged PRs (30d)
38

Description

### Describe the problem

Hi team,
I deployed chroma as docs [here](https://docs.trychroma.com/production/containers/docker) with authencation as below:
````
environment:
- IS_PERSISTENT=TRUE
- PERSIST_DIRECTORY=./chroma
- ANONYMIZED_TELEMETRY=TRUE
- CHROMA_OPEN_TELEMETRY__ENDPOINT=http://otel-collector:4317/
- CHROMA_OPEN_TELEMETRY__SERVICE_NAME=chroma
- CHROMA_SERVER_AUTH_CREDENTIALS_PROVIDER=chromadb.auth.token.TokenConfigServerAuthCredentialsProvider
- CHROMA_SERVER_AUTH_PROVIDER=chromadb.auth.token.TokenAuthServerProvider
- CHROMA_SERVER_AUTH_TOKEN_TRANSPORT_HEADER=X_CHROMA_TOKEN
- CHROMA_SERVER_AUTH_CREDENTIALS=test
````
I used sample code as below but authencation seem not worked (still connect normal without authencation):
```
import chromadb

client = chromadb.HttpClient(host="localhost", port=8000)
collection = client.create_collection(name="example_collection")
```
Or not work for [VectorAdmin ](https://github.com/Mintplex-Labs/vector-admin) (API Header and Key).

Is there any info that setup docker compose for authencation?

### Describe the proposed solution

I' m finding how to deploy chroma having API authencation as customized chroma [here](https://blog.amikos.tech/secure-your-chroma-db-instance-part-1-authentication-c2f1979e7c19) but it's not offical.

Maybe contact to customized chroma author to develop for this feature.

### Alternatives considered

I hope this feaure that release offical in the feature.

### Importance

nice to have

### Additional Information

_No response_

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the linked Docker deployment documentation and the Python chromadb.HttpClient entry point shown in the report. Reproduce the configured token-authentication setup, determine why unauthenticated requests still succeed, and define the supported Basic or token configuration and client behavior before implementation.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, python
Domain
api, authentication, backend
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.