🔨 refactor(constants.tsx): remove flowId from API_URL and add it to the headers as an Authorization token

The flowId is now passed as an Authorization token in the headers of the API request. This improves security as the flowId is not exposed in the URL. The API_URL now only contains the base URL without the flowId.

src/frontend/src/constants.tsx

@@ -46,15 +46,28 @@ export const TEXT_DIALOG_SUBTITLE = "Edit you text.";
 export const getPythonApiCode = (flowId: string): string => {
   return `import requests
 
-  FLOW_ID = "${flowId}"
+FLOW_ID = "${flowId}"
-  API_URL = f"${window.location.protocol}//${window.location.host}/predict/{FLOW_ID}"
+API_URL = f"${window.location.protocol}//${window.location.host}/predict"
 
-  def predict(message):
+def run_flow(message, tweaks=None):
-      payload = {'message': message}
-      response = requests.post(API_URL, json=payload)
-      return response.json()
 
-  print(predict("Your message"))`;
+    if tweaks:
+        payload = {'message': message, 'tweaks': tweaks}
+    else:
+        payload = {'message': message}
+
+    headers = {'Authorization':
+			 f'Bearer {FLOW_ID}',
+			 'Content-Type': 'application/json'
+		}
+
+    response = requests.post(API_URL, json=payload)
+    return response.json()
+
+# Setup any tweaks you want to apply to the flow
+tweaks = {} # {"nodeId": {"key": "value"}, "nodeId2": {"key": "value"}}
+
+print(run_flow("Your message", tweaks=tweaks))`;
 };
 
 /**
@@ -65,8 +78,9 @@ export const getPythonApiCode = (flowId: string): string => {
 export const getCurlCode = (flowId: string): string => {
   return `curl -X POST \\
   -H "Content-Type: application/json" \\
+  -H "Authorization: Bearer ${flowId}" \\
   -d '{"message": "Your message"}' \\
-  ${window.location.protocol}//${window.location.host}/predict/${flowId}`;
+  ${window.location.protocol}//${window.location.host}/predict`;
 };
 
 /**